Business Analyst Active Directory Solution

Our enterprise client has an immediate opening for an experienced Business Analyst specializing in Active Directory.

In this role, you'll work directly with corporate end users to define AD groups while using Excel to manage and structure access data. Deep familiarity with AD support and data analysis is essential.

The Business Analyst - Active Directory & Automation serves as the liaison between business stakeholders, Information Security, IAM engineering, application owners, and IT support teams. This role analyzes identity and access management processes, with a strong focus on Microsoft Active Directory, access provisioning, role and group management, and user lifecycle controls.

The position combines traditional business analysis responsibilities with hands-on technical analysis using Power Shell, Active Directory reporting tools, and structured data. The analyst will identify process gaps, analyze access and group membership data, develop requirements, support remediation initiatives, and automate recurring analysis and reporting activities.

The ideal candidate has a strong understanding of Active Directory structures, access governance, business process analysis, and data-driven problem solving.

Key Responsibilities

Business and Process Analysis

• Partner with IAM, Information Security, Infrastructure, Human Resources, application owners, and business stakeholders to document active directory groups and access management requirements.
• Analyze current-state IAM processes, including onboarding, transfers, terminations, access requests, approvals, provisioning, deprovisioning, and periodic access reviews.
• Develop current-state and future-state process maps, business requirements, functional requirements, user stories, acceptance criteria, and workflow documentation.
• Identify process gaps, control weaknesses, approval delays, manual dependencies, and opportunities for automation.
• Facilitate requirements-gathering sessions, stakeholder interviews, working sessions, and process reviews.
• Maintain project documentation, decision logs, requirements traceability, action items, and implementation status.

• Perform detailed analysis of Active Directory users, groups, organizational units, group memberships, nested groups, ownership, and access relationships.
• Identify inactive accounts, orphaned accounts, duplicate access, excessive permissions, unmanaged groups, stale memberships, and groups without valid owners.
• Analyze security groups, distribution groups, privileged groups, service accounts, shared accounts, and role-based access structures.
• Support Active Directory cleanup, access certification, entitlement rationalization, group ownership validation, and remediation initiatives.
• Compare requested, approved, provisioned, and removed access to identify discrepancies.
• Analyze user access based on department, title, manager, location, employment status, start date, termination date, and job function.
• Assist with the development and validation of role-based access control and birthright-access models.
• Support investigations involving access provisioning failures, inappropriate permissions, delayed onboarding, and incomplete deprovisioning.

• Develop and maintain Power Shell scripts to query and analyze Active Directory objects, attributes, memberships, ownership, and account status.
• Use Python to clean, transform, compare, reconcile, and analyze IAM and Active Directory datasets.
• Automate recurring reports, data-quality checks, exception identification, access comparisons, and remediation tracking.
• Extract and consolidate information from Active Directory, IAM platforms, Service Now, CSV files, Excel workbooks, databases, and other approved sources.
• Build reusable scripts and analytical tools with appropriate logging, error handling, validation, and documentation.
• Produce structured outputs for operational teams, auditors, control owners, and senior management.
• Work with technical teams to transition approved scripts and analysis…