IAM Business Analyst

Location: Remote, with potential occasional travel to Lexington, KY for team meetings

Employment Type: Contract

Anticipated

Schedule:

40 hours per week preferred; a 20-hour arrangement may be considered

Proposed Duration: Initial 3-month engagement with potential extension; final schedule and duration subject to approval

We are seeking an experienced Business Analyst to support an Identity & Access Management (IAM) program and identity modernization initiatives. This person will partner with IAM engineering, operations, and business stakeholders to evaluate current capabilities, identify gaps, and recommend practical improvements to identity processes and governance.

The ideal candidate is inquisitive, consultative, and comfortable driving analysis independently. They can investigate why a process exists, determine whether it achieves its intended outcome, challenge assumptions, and help stakeholders define a more effective future state.

Prior experience working as a Business Analyst within an IAM program is required. Candidates must bring both strong business analysis skills and practical knowledge of identity processes within enterprise IT and security environments.

• Evaluate existing identity processes and solutions to validate that they operate as intended and meet business objectives.
• Analyze account provisioning and identity lifecycle workflows, identifying failures, control gaps, and opportunities to improve visibility into successful outcomes.
• Gather, document, and validate current-state processes, including account requests, creation, access assignment, and ongoing lifecycle management.
• Assess identity data quality and process maturity to determine readiness for role mining, role engineering, and role-based access initiatives.
• Investigate recurring operational issues, identify root causes, and recommend improvements that reduce manual work and support incidents.
• Facilitate discussions with technical teams and business users to understand underlying needs, evaluate alternatives, and clarify the impact of proposed changes.
• Define future-state processes, business requirements, and use cases that support identity governance and modernization.
• Identify opportunities for automation and improvements to access controls, password management, and governance.
• Translate findings into actionable recommendations, prioritized deliverables, and implementation plans in partnership with technical teams.
• Maintain accurate process maps and requirements documentation across multiple identity-related initiatives.

• Demonstrated experience working as a Business Analyst on IAM projects or within an IAM program.
• Strong understanding of identity processes, account provisioning, access management, and identity lifecycle management.
• Proven ability to evaluate process effectiveness, investigate root causes, and recommend improvements.
• Strong requirements gathering, process mapping, gap analysis, and documentation skills.
• Ability to lead conversations with business and technical stakeholders, ask probing questions, and constructively challenge assumptions.
• Sufficient technical understanding to engage effectively with IAM engineering and operations teams.
• Ability to work independently, take ownership of deliverables, and produce meaningful progress with limited oversight.
• Strong communication, organization, and stakeholder management skills.

• Identity Governance and Administration (IGA).
• Role-based access control (RBAC), role mining, or role engineering.
• Identity maturity assessments and identity data quality analysis.
• HR-driven provisioning and enterprise directory services.
• IAM modernization, operational automation, and process improvement.

• Validate and document existing identity and account lifecycle processes.
• Identify where current solutions lack visibility, fail to meet objectives, or create recurring operational issues.
• Deliver practical recommendations and a prioritized improvement plan that demonstrate value early in the engagement.