Job Summary:

The IT Access Administrator supports Identity and Access Management (IAM) and access administration functions across the organization, with a strong focus on improving and automating access management processes. This position supports user access throughout the identity lifecycle, including onboarding, role changes, offboarding, access provisioning and deprovisioning, entitlement management, access reviews, and privileged access administration. The ideal candidate combines hands-on access management experience with automation skills and is comfortable identifying manual or inefficient processes and improving them through scripting, workflows, APIs, or IAM/IGA platforms.

Essential Functions & Responsibilities:

Performs access account administration tasks for business lines, external partners, senior management, and internal customers, including privilege requests, password management, access provisioning, and deprovisioning. Supports identity lifecycle activities, including onboarding, role changes, transfers, and offboarding. Applies IAM principles including least privilege, RBAC, Segregation of Duties (SoD), and access governance. Performs periodic access reviews, entitlement revalidations, and access certifications. Supports privileged access management activities and secure handling of privileged credentials. Supports the deployment, configuration, maintenance, and optimization of IAM, IGA, and PAM tools. Identifies manual or repetitive access management processes and develops or implements automation to improve efficiency, accuracy, and security. Uses PowerShell, Python, scripting, REST APIs, workflows, or IAM platform capabilities to automate provisioning, deprovisioning, account management, access validation, reporting, or other IAM processes. Troubleshoots access, authentication, provisioning, and authorization issues. Works within ticketing systems to ensure access requests and incidents are addressed accurately and timely. Maintains and develops procedures, role templates, policy documentation, and "How-To" guides supporting access management functions. Maintains and updates Staff Lists, Role Templates, and Policy Templates in coordination with appropriate business lines. Supports audit and compliance activities, including access reviews, entitlement reviews, and evidence collection. Maintains access management metrics and assists with dashboards and reporting. Analyzes system and database logs to identify and resolve potential or existing access-related issues. Proactively identifies process gaps and assists with remediation and process improvement efforts. Collaborates with business teams, application owners, security teams, HR, vendors, and IT stakeholders on access management initiatives and issues. Participates in IT Change Advisory Board (CAB) activities related to access management and organizationally impactful changes. Provides clear and timely communication regarding access-related incidents, system changes, maintenance windows, projects, and testing activities. Performs other job-related duties as assigned.

Knowledge and Skills:

Work Experience Minimum 3 years of experience in Identity & Access Management, Access Administration, IGA, or a closely related role. Required Experience in a financial institution, credit union, banking, or other regulated environment. Preferred Education, Licenses, and Certifications High School Diploma or GED. Required Bachelor's Degree in Computer Science, Management, Education, Information Technology, Technical, Administration, Business, Information Systems, or a related field, or an equivalent combination of education and related work experience. Preferred Other Skills Hands-on experience with user provisioning, deprovisioning, and Joiner-Mover-Leaver (JML) processes. Knowledge of entitlements, groups, roles, and RBAC. Experience with access reviews, certifications, and entitlement revalidation. Experience with Active Directory and/or Microsoft Entra ID. Experience with ticketing and workflow systems such as ServiceNow or similar platforms. Experience automating IAM or access management processes using PowerShell, Python, scripting, workflows, APIs, or similar technologies. Experience with IAM/IGA platforms such as SailPoint, SailPoint IdentityNow/IdentityIQ, Okta, Microsoft Entra ID, One Identity, ConductorOne, or similar tools. Preferred Experience with PAM solutions such as CyberArk or similar technologies. Preferred Experience integrating IAM systems using REST APIs, SCIM, or similar technologies. Preferred Experience supporting

SOX, SOC

2, NIST, or other security and compliance requirements. Preferred Proficiency in Microsoft 365. Experience supporting multiple users, applications, and stakeholders. Strong analytical, troubleshooting, and problem-solving skills.

Automation Focus:

The ideal candidate will have experience identifying manual access management processes and developing or implementing automated solutions.

Relevant experience may include:

Automating user onboarding and offboarding. Automating provisioning and deprovisioning. Automating Active Directory group or role assignments. Automating access reviews and entitlement validation. Building IAM workflows. Developing PowerShell or Python scripts for IAM tasks. Using REST APIs or SCIM for identity integrations. Automating repetitive ServiceNow or IAM workflows. Improving manual IAM processes through SailPoint, Okta, Entra ID, ConductorOne, or similar platforms. Candidates do not need experience with every tool listed. Strong hands-on IAM/access management experience combined with the ability to automate and improve processes is the key focus of this role. Required for All Jobs Follows Credit Union policies and procedures as well as applicable laws and regulations. Maintains a record of attendance and timeliness in keeping with the Credit Union's attendance policy.

Working Environment:

Hybrid work environment in Oak Ridge, TN. Monday-Wednesday onsite; Thursday-Friday remote. Indoor, climate-controlled environment. Well-lit workstations with desks, chairs, and computer equipment. Low to moderate noise levels.

Pay:

$62,000.00 - $80,000.00 per year

Benefits:

Dental insurance Health insurance Paid time off Vision insurance People with a criminal record are encouraged to apply

Work Location:

Hybrid remote in Oak Ridge, TN 37831