Identity & Access Management Analyst

Benefits

• Competitive compensation
• Medical, Dental, and Vision insurance
• 401(k) Retirement Savings Plan with substantial company match
• Life and Travel Insurance
• Tuition Assistance
• Wellness Reimbursement Program
• Paid Holidays and Vacation

We are seeking a diligent and experienced Identity and Access Management (IAM) Analyst to join our Information Technology and Cybersecurity team. The IAM Analyst will manage and secure user identities, access controls, and authentication and authorization systems across the organization’s IT and OT environments. Responsibilities include administration and governance of identity lifecycle management, access provisioning, role-based access control, privileged access management, and ensuring compliance with security policies and regulatory requirements.

• Administer and maintain IAM platforms such as Azure Entra , Active Directory, SailPoint, and related solutions.
• Design, create, and manage Microsoft Entra  Applications and App Registrations, including configuration of authentication methods (OAuth2/OIDC/SAML), API permissions, secrets/certificates, and lifecycle governance.
• Manage the full identity lifecycle for employees, contractors, and service accounts.
• Implement and maintain role-based access control (RBAC) models to align access rights with job functions and the principle of least privilege.
• Administer and support MFA, SSO, and conditional access policies.
• Monitor privileged access management (PAM) solutions and conduct regular user access reviews and certification campaigns.
• Investigate and resolve access-related incidents, including unauthorized access attempts, account lockouts, and permission escalation issues.
• Develop and maintain IAM policies, procedures, and standard operating documentation.
• Partner with HR, IT, and business units for timely onboarding, offboarding, and role change processes.
• Support integration of applications and systems with IAM platforms via SAML, OAuth, OIDC, and SCIM.
• Monitor IAM systems for anomalies, misconfigurations, and security risks; recommend remediation actions.
• Generate reports and dashboards on IAM metrics such as access review completion rates and compliance.
• Automate IAM workflows using scripting and orchestration tools.
• Stay updated on IAM trends and apply knowledge to improve identity security posture.
• Assist audit and compliance activities by providing evidence of access controls.
• Promote awareness of identity security and access hygiene best practices.
• Participate in IAM-related project planning, execution, and on‑call rotation as needed.
• Provide storm/emergency response support.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field, or an associate degree with 3+ years of IAM experience, or a high school diploma with 5+ years of IAM experience.
• Experience administering Azure Entra , Active Directory, or other IAM/IGA platforms.
• Understanding of IAM concepts including identity lifecycle management, RBAC, least privilege, SSO, MFA, and conditional access.
• Experience with user provisioning, de‑provisioning, and access certification processes.
• Experience configuring and administering Windows Servers, AD & Group Policy, Microsoft 365, Azure compute and networking resources.
• Experience with scripting for automation and analysis (Power Shell, Python, Bash).
• Familiarity with authentication and federation protocols such as SAML, OAuth, OIDC, and SCIM.
• Knowledge of privileged access management principles and tools.
• Knowledge of regulatory and compliance frameworks (SOX, NERC CIP, NIST).
• Knowledge of Operational Technology (OT) systems and their access management requirements.
• Effective communication skills and ability to collaborate with diverse teams.
• Excellent analytical, decision‑making, multitasking, and organizational skills.
• Ability to work with limited direct supervision and respond to constructive feedback.
• Availability for on‑call and after‑hour incidents.
• Valid driver’s license.
• Pay range: $73,000 - $171,300.

• 5+ years of experience in identity and access management or a closely related cybersecurity discipline.
• Experience with…