Senior Information Security Analyst

Senior Information Security Analyst Remote (EST)- Client located in Albany, New York 1 year (with opportunity for extension) 40 hours/week Hourly Rate 62.00

Initiative: IAM (Identity and Access Management) - Cloud first initiatives and new IT projects including O365, Egnyte, and AI result in a resource gap to meet NYS ITS Policy.

IT Systems That will Be Used:
Microsoft Suite, Azure, Entra

• Proven knowledge of security certifications (e.g., CISSP, CISA, CISM, GPEN, GWAPT, GCIH, GIAC certifications, OSCP, CEH, Security+).
• Working knowledge of information security, risk management, security architecture, computer networks, incident response, and vulnerability management.
• Bachelor’s degree in cyber security, information assurance, or information technology.
• 2-4 years of dedicated security experience.
• Experience with traditional/hybrid approach with Microsoft products.

• Manage security operations tasks related to identity and access management, including incident response recommended solutions.
• Lead the development and implementation of the IAM strategy aligned with business objectives and regulatory requirements in conjunction with security policy.
• Support, design, and documentation for IAM architecture, identity governance, and role-based access control.
• Manage security operations tasks related to identity and access management, including incident response recommended solutions.
• Identify and rectify gaps within current infrastructure as it relates to onboarding and offboarding personnel.
• Ensure IAM processes comply with industry standards (NIST, ISO, CIS, NYS ITS) and internal policies developed by the ISO.
• Conduct regular audits and assessments to identify vulnerabilities and ensure compliance.
• Assess current applications and architecture to ensure implementations align with identity-first security strategies, best practices, and approved standards.
• Define integration methodologies for IAM solutions with existing and onboarding applications, including cloud services, on-prem systems, and third‑party applications (Entra , Azure, on‑prem Active Directory, etc.).
• Work closely with other teams within IT to ensure fluid cohesiveness.
• Other duties as assigned that contribute to the key outcomes of the Information Security team .