Identity and Access Management Analyst

## Identity and Access Management Analyst Apply locations:
Irving, TXtime type:
Full time posted on:
Posted 2 Days Agojob requisition :
REQ-441

FHLB Dallas actively pursues dedicated and hardworking individuals to be a part of our professional team. Positions are offered on an as-needed basis for all departments.  View our current opportunities by clicking the View Open Positions tab above.  BASIC PURPOSE This is a hands-on identity governance role focused on secure, compliant access for employees and Bank members. You’ll own the day-to-day identity lifecycle, access request workflows, and Bank-wide access reviews.

You will also participate within an On-Call rotation in support of IT Security Incident Management, gaining knowledge and proficiency within the Microsoft Defender suite of tools, SIEM/SOAR (alert handling & automation), threat containment procedures, and audit‐ready evidence handling.

PRIMARY RESPONSIBILITIES:

Identity lifecycle (joiner-mover-leaver)                 
* Execute and continuously improve onboarding, role changes, and offboarding for internal users and ensuring right-first-time provisioning, timely revocation, and a clean audit trail.
* Integrate HR signals and directory attributes to drive role-based access (RBAC) updates automatically; remove obsolete entitlements when a user moves.

Entitlement Management & Access Packages (Entra)                 
* Build and administer Access Packages (catalogs, resource roles, request/approval policies, expiration, etc.) within Azure and other applicable solutions
* Govern lifecycle with automated assignment, review, and expiry to prevent stale access while reducing manual tickets.
* Operate Privileged Identity Management (PIM) solutions.  Manage role-eligibility, MFA requirements, approvals at activation, time-bound elevation, and recurring reviews to minimize standing privileged access.

Member Access & Permissions                  
* Process daily member access requests and translate verified instructions into application entitlements across Bank systems.
* Troubleshoot access/system issues and effectively collaborate with other Bank departments and personnel.
* Maintain traceable records of approvals/changes to support regulatory and audit requirements.

Application Access Administration                 
* Operate enterprise IAM platforms (e.g., Microsoft Entra , ADDS, and other internally-built solutions) to grant, modify, and revoke access; enforce SSO, MFA, RBAC, and Segregation of Duties policies across directories and apps.
* Standardize request/approval workflows, entitlement catalogs, and role definitions with clear SOPs.
* Perform User-Acceptance-Testing (UAT) within applications in support of deployments.
* Manage keys and secrets in support of business applications.

Access Reviews & Audit Readiness                    
* Plan, schedule, and run Access Reviews for groups, applications, and privileged roles; capture reviewer decisions and automate removals of unneeded access.
* Prepare audit evidence (reports, logs, approval histories, exceptions) to satisfy control tests and exam procedures.

Incident Response (On-Call)                    
* Participate in On-Call rotation for all IT Security related incidents; investigate, contain, and restore securely while documenting post-incident findings.
* Partner with Security Operations to correlate signals and tighten controls after lessons learned.

Compliance & Governance           
* Align identity controls to banking authentication/access guidance; maintain consistent processes that produce audit-ready artifacts.
* Track identity KPIs (time-to-provision, stale-access reduction, review completion rates) and prepare metrics/dashboards when applicable.

JOB REQUIREMENTS:

* Bachelor’s degree in computer science, IT Administration, Information Systems or related field. (In lieu of degree, 3+ years of experience required).
* Knowledge of application security processes and procedures.
* Knowledge of Identity and Access concepts and technologies to secure production and corporate access, such as:
Azure Active Directory (Microsoft Entra ), SSO, etc.
* Ability to understand and learn automation technologies and build applicable automations
* Experience and/or conceptual knowledge with a broad array of security technologies, such as firewalls, SIEM/SOAR, endpoint security, and vulnerability management solutions (Qualys, Tenable).
* Possesses understanding of concepts and knowledge in various information security areas, such as:
Identity and Access Management, Security technology, Role-based Access Controls, Information Risk and Governance.
* Ability to manage multiple complex challenges in parallel, and solve them with cost effective, highly automated, efficient, and proven security technologies or controls.
* Highly detail oriented and driven to take initiative.
* Must possess excellent communications and interpersonal skills and be able to effectively work with all levels of Bank management as well as external customers.
* Applicable…