Senior IAM Systems Support Analyst; Global Security

What is the opportunity?

As the Senior IAM Systems Support Analyst, you will be responsible for deploying, supporting and continuously improving enterprise IAM services with a focus on passwordless authentication (e.g., Secret Double Octopus) and strong MFA. The analyst owns day-to-day platform reliability, incident response, deployment of a large-scale enterprise solutions including infrastructure, application, and integrations while partnering with architecture, security, and application teams.

• Operate and support enterprise IAM and passwordless platforms (e.g., Secret Double Octopus, FIDO2, MFA, SSO), ensuring high availability and performance.
• Act as subject matter expert for passwordless journeys, including enrollment, recovery, and step‑up authentication across web, mobile, and desktop channels.
• Monitor, triage, and resolve IAM and authentication incidents, including on‑call participation for production issues impacting login and access.
• Integrate passwordless and MFA flows with identity providers and directories (e.g., Entra /Azure AD, AD, SAML/OIDC/OAuth2 applications).
• Work with application and product teams to onboard new applications to the passwordless solution, including requirements gathering, configuration, and testing.
• Implement and maintain authentication and authorization controls in line with corporate security standards, Zero Trust principles, and regulatory requirements.
• Perform root‑cause analysis for complex authentication and access issues, documenting findings and implementing preventive measures.
• Maintain detailed runbooks, configuration baselines, and operational documentation for IAM and passwordless platforms.
• Support IAM audits, compliance reviews, and evidence requests related to access controls, authentication policies, and passwordless adoption.
• Collaborate with security architecture, SOC, network, and endpoint teams to align detection, logging, and response for identity‑related threats.
• Analyze usage metrics and feedback to optimize user experience and adoption of passwordless authentication.
• Mentor junior analysts and provide technical guidance on IAM tools, support processes, and secure authentication patterns.
• Develop and maintain strong relationships with team members, stakeholders, and interface with groups using a variety of techniques.

• 3+ years in IAM, security operations, or systems support roles with hands‑on responsibility for authentication platforms.
• Direct experience supporting or implementing passwordless or strong MFA solutions (e.g., FIDO2/Web Authn, passkeys, authenticator apps, push, or vendors like Secret Double Octopus, Transmit, Okta, Ping, Entra ).
• Strong knowledge of IAM concepts: identity lifecycle, RBAC, least privilege, SSO, session management, and privileged access considerations.
• Solid understanding of authentication and federation protocols: OIDC, OAuth2, SAML2, and related token flows.
• Proven experience supporting Microsoft Entra /Azure AD and Active Directory in an enterprise environment.
• Strong troubleshooting skills across web, mobile, and endpoint environments, including logs, HTTP flows, certificates, and directory lookups.
• Familiarity with security and compliance frameworks (e.g., NIST, ISO 27001, CIS, Zero Trust) and their implications for IAM controls.
• Scripting or automation capability (Power Shell, Python, or similar) to streamline IAM operations and reporting.
• Excellent communication skills, able to work with developers, security teams, and business stakeholders to translate requirements into technical changes.
• Experience working in ITIL processes - incident, problem, and change management processes.

• Hands‑on experience with specific passwordless vendors (e.g., Secret Double Octopus, Transmit Security, HYPR, Beyond Identity) in production environments.
• Direct experience supporting or implementing passwordless or strong MFA solutions (e.g., FIDO2/Web Authn, passkeys, authenticator apps, push, or vendors like Secret Double Octopus, Transmit, Okta, Ping, Entra ).
• Experience with CIAM use cases (large‑scale customer or partner identities) and adaptive/risk‑based authentication.
• E…