Senior Identity and Access Management Analyst

About the role

The Senior Identity and Access Management (IAM) Analyst ensures that the right people securely access the right company data and systems. The role supports and matures IAM capabilities across the enterprise by designing, implementing and maintaining IAM-enabled access practices that strengthen internal controls, support audit readiness and enable efficient, scalable operations. It is an individual contributor role reporting to the Director of Cybersecurity and interacting with Global IT, Project Management, Engineering, Legal and Risk Management.

Key responsibilities

• Serve as subject matter expert for IAM and SOX logical access controls across financial systems
• Administer IAM access governance: provisioning workflows, lifecycle management, group structures and access certifications
• Design IAM frameworks aligned to least privilege, RBAC, segregation of duties (SoD) and SOX compliance
• Support SOX controls, privileged access management and user access reviews (UARs)
• Review and remediate access risks such as excessive access, orphaned accounts, stale memberships and SoD conflicts
• Support audit readiness through documentation, evidence preparation and remediation tracking
• Manage identity lifecycles (joiner, mover, leaver) and provision access across systems such as JD Edwards and Autodesk platforms
• Maintain Microsoft Entra ID and on-premises Active Directory, and implement SSO, MFA and conditional access
• Work on IAM platforms such as SailPoint, Okta and CyberArk, and integrate IAM with Azure, AWS and SaaS applications
• Automate provisioning workflows and mentor IT staff and business stakeholders

Required profile

• Bachelor's degree in Information Technology, Cybersecurity or a related field
• 10+ years of information technology experience, 5+ years in IAM, IT security or infrastructure
• Certifications such as CISSP, CISM, or Microsoft SC-300 (Identity and Access Administrator)
• Experience in EPC or industrial environments is desired

Required skills

• Enterprise IAM platforms: Microsoft Entra ID, Okta, SailPoint, CyberArk
• Authentication, authorization and federation: SSO, MFA, SAML, OAuth 2.0, OpenID Connect, Active Directory, LDAP
• Cloud and hybrid identity: Azure AD, AWS IAM, GCP IAM
• Access governance, SoD enforcement, audit and compliance; privileged access management
• Automation and scripting with PowerShell and Python