Identity & Access Management Analyst

• 401(k) Retirement Savings Plan with substantial company match
• Life and Travel Insurance
• Tuition Assistance
• Wellness Reimbursement Program
• Paid Holidays and Vacation

Benefits

• Competitive compensation
• Medical, Dental, and Vision insurance
• 401(k) Retirement Savings Plan with substantial company match
• Life and Travel Insurance
• Tuition Assistance
• Wellness Reimbursement Program
• Paid Holidays and Vacation

We are seeking a diligent and experienced Identity and Access Management (IAM) Analyst to join our team. In this role, you will be working within a group of highly motivated Information Technology and Cybersecurity professionals committed to keeping Central Hudson safe. The IAM Analyst will be responsible for managing and securing user identities, access controls, and authentication and authorization systems across the organization’s IT and OT environments.

This includes the administration and governance of identity lifecycle management, access provisioning, role-based access control, privileged access management, and ensuring compliance with security policies and regulatory requirements. The ideal candidate will have a strong understanding of IAM principles, directory services, SSO/MFA technologies, excellent analytical skills, and the ability to communicate effectively with internal stakeholders and vendors alike.

• Administers and maintains identity and access management platforms, including Azure Entra  (Azure AD), Active Directory, SailPoint and related IAM solutions to ensure secure and efficient access across the organization
• Design, create, and manage Microsoft Entra  (Azure AD) Enterprise Applications and App Registrations, including configuration of authentication methods (OAuth2/OIDC/SAML), API permissions, secrets/certificates, and lifecycle governance aligned with enterprise security standards
• Manages the full identity lifecycle including provisioning, de-provisioning, transfers, and role changes for employees, contractors, and service accounts
• Implements and maintains role-based access control (RBAC) models, ensuring access rights are aligned with job functions and the principle of least privilege
• Administers and supports multi-factor authentication (MFA), single sign-on (SSO), and conditional access policies to strengthen authentication controls
• Manages and monitors privileged access management (PAM) solutions to secure elevated accounts and reduce risk of credential-based attacks
• Conducts regular user access reviews and certification campaigns to validate access appropriateness and ensure compliance with internal policies and regulatory requirements (e.g., SOX, NERC CIP)
• Investigates and resolves access-related incidents, including unauthorized access attempts, account lockouts, and permission escalation issues
• Develops and maintains IAM policies, procedures, and standard operating documentation
• Partners with HR, IT, and business units to ensure timely and accurate access provisioning aligned with onboarding, offboarding, and role change processes
• Supports the integration of applications and systems with centralized IAM platforms, including SAML, OAuth, OIDC, and SCIM-based integrations
• Monitors IAM systems for anomalies, misconfigurations, and potential security risks; escalates findings and recommends remediation actions
• Generates reports and dashboards on IAM metrics, including access review completion rates, provisioning SLAs, and policy compliance
• Automates IAM workflows and processes using scripting and orchestration tools to improve efficiency and reduce manual effort
• Stays updated with the latest IAM trends, threats, and technologies, and applies this knowledge to strengthen the organization’s identity security posture
• Supports audit and compliance activities by providing evidence of access controls, policy enforcement, and identity governance
• Promotes and raises awareness by educating others about the importance of identity security and access hygiene best practices
• Supports project planning and execution for IAM-related initiatives, including tracking timelines and resource needs
• Participates in on-call…