IAM Analyst

Ensure every user has the correct access required for their role-based job function through least-privilege principles, while strictly adhering to internal security policies and external audit guidelines. This role bridges the gap between technical permissions management and regulatory compliance, ensuring the identity lifecycle remains efficient, secure, and audit ready.

Contract Duration:

3 months+ possible conversion to perm Required Skills & Experience MS Office High school diploma or GED required Detail oriented Multi tasker Desired Skills & Experience Working through email requests

Understanding of AD What You Will Be Doing Daily Responsibilities User Access Provisioning & Lifecycle Management of Permissions:

Execute the end-to-end lifecycle of user profiles, including creating new accounts, modifying permissions for internal transfers, and performing rapid de-provisioning for offboarding to maintain environment security. Execute the end-to-end lifecycle of user profiles, including creating new accounts, modifying permissions for internal transfers, and performing rapid de-provisioning for offboarding to maintain environment security.

Role Discovery & Governance:

Collaborate with department heads and data stewards to analyze and document business roles, ensuring technical permissions align with actual job functions through Role-Based Access Control (RBAC) models. User Access Reviews (UAR): Facilitate and manage periodic access certification campaigns, providing reporting to managers and collecting formal signoffs to meet compliance requirements.

Audit Evidence Collection:

Respond to requests from internal and external auditors (e.g., SOX) by extracting system logs and providing verified documentation of compliant access controls. Segregation of Duties (SoD)

Analysis:

Regularly monitor for conflicting permissions-such as a single user having the ability to both request and approve financial transactions-and remediate these "toxic combinations".

Technical Troubleshooting:

Investigate and resolve complex access-related issues and authentication failures across enterprise platforms to ensure established security and compliance standards and uninterrupted business operations.