Identity and Access Management; IAM Analyst - Portsmouth, NH

It’s fun to work in a company where people truly BELIEVE in what they’re doing! We’re committed to bringing passion and customer focus to the business. Service Credit Union is seeking an Identity and Access Management (IAM) Analyst who will serve as a guardian of employee and member‑facing identity, safeguarding critical and confidential information belonging to Service Credit Union.

This hybrid identity role has two anchor accountabilities: co‑administration of the SailPoint Identity IQ platform and business and technical liaison for the Passwordless Authentication platform. The IAM Analyst also supports adjacent identity functions, including MFA, SSO, PAM, and directory services, ensuring access is granted, modified, and removed in accordance with policy, approvals, and the principle of least privilege. The role works closely with Information Security, Infrastructure, Application Development, HR, and business units to deliver secure, compliant, and frictionless identity experiences.

• SailPoint IAM Co‑Administration

  Co‑administer the SailPoint platform in partnership with the IAM Administrator and Engineering team, including configuration of lifecycle events, application onboarding, access request workflows, and certification campaigns. Execute and refine the RBAC model, reconcile discrepancies between assigned access rights and the access required for users to perform their job duties. Support access provisioning, de‑provisioning, transfers, and off‑boarding events in alignment with established policies, standards, and procedures.
  
  Design, schedule, and monitor periodic access certification and Segregation of Duties (SoD) reviews, tracking remediation to closure. Maintain accurate documentation for SailPoint configurations, role models, connectors, and operational procedures.

• Passwordless Authentication Platform Liaison & Support

  Act as the primary business liaison and Tier 2 support owner for the Passwordless Authentication platform, coordinating between the vendor, Information Security, IT Operations, and end users. Manage user enrollment, credential lifecycle (registration, recovery, revocation), device binding, and exception handling for passwordless authenticators (FIDO2 / passkeys / platform authenticators). Partner with Engineering to integrate passwordless authentication with SSO, conditional access, and downstream applications;
  
  validate authentication flows and fallback paths. Monitor platform health, authentication success/failure metrics, and user adoption; produce reports and recommend improvements to increase adoption and reduce friction. Develop end‑user communications, FAQs, knowledge articles, and training materials to support the ongoing rollout and steady‑state operation of passwordless authentication. Serve as a subject matter resource for phishing‑resistant authentication concepts and align platform practices with NIST 800‑63 guidance and emerging industry standards.

• Broader Identity & Access Functions

  Support the enrollment and administration of MFA, SSO, PAM, and Mobile Device Management (MDM) integrations. Administer Active Directory, Entra  (Azure AD), and related enterprise directory services in support of identity lifecycle events. Enforce organizational policies and procedures to ensure only authorized personnel have access to information, in compliance with the Minimum Necessary Rule and least‑privilege principles. Ensure evidence of authorization is documented and archived according to internal standards, and support audit, examiner, and risk‑assessment requests.
  
  Troubleshoot identity, authentication, and workflow issues independently or in collaboration with other IS teams, adhering to internal service standards and SLAs. Recommend and implement process improvements, automation, and orchestration of repeatable IAM tasks. Participate in projects to implement new IAM integrations, provisioning points, and RBAC extensions. Support incident research, evidence gathering for audits, and remediation of identity‑related risks. Regular and reliable attendance is an essential function of this position.
  
  Other duties as assigned.

• Bachelor’…