> Markdown version of [/jobs/ext/1819613-active-directory-business-analyst](https://www.wearedevelopers.com/jobs/ext/1819613-active-directory-business-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Active Directory Business Analyst - **Company:** Randstad - **Location:** Edison, NJ, United States - **Experience:** Experienced - **Salary:** $104,000.0 - $156,000.0 - **Contract:** Contract - **Skills:** Microsoft Access, Microsoft Excel, Active Directory, Business Analytics Applications, Data Analysis, Big Data, Bioinformatics, Code Review, Cyber Security, Information Systems, Databases, Data Validation, Data Visualization, Multi-Factor Authentication, Identity and Access Management, JSON, Python (Programming Language), Knowledge Management, Pivot Tables, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Zero Trust Network Access, Requirements Management, Requirements Traceability, Single Sign-On, SQL Databases, User Provisioning Software, Data Logging, Data Processing, Okta, Cyberark, Git, Information Technology, Data Analytics, Tools for Reporting, SailPoint, Restful APIs, Software Version Control, Servicenow - **Published:** July 23, 2026 - **Apply:** https://www.randstadusa.com/jobs/4/1340635/active-directory-business-analyst_edison/ ## About the Role Required Qualifications Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Business Analysis, Information Systems, or a related discipline, or equivalent professional experience. Three or more years of experience in business analysis, identity and access management, cybersecurity, Active Directory administration, or a related technology function. Demonstrated experience analyzing Microsoft Active Directory users, groups, memberships, attributes, organizational units, and account status. Hands-on experience writing and executing PowerShell scripts for Active Directory analysis and reporting. Experience using Python for data analysis, reconciliation, automation, or reporting. Strong understanding of identity lifecycle management, including onboarding, transfers, terminations, provisioning, deprovisioning, and access certification. Experience gathering and documenting business requirements, functional requirements, user stories, workflows, and acceptance criteria. Strong analytical skills with the ability to work with large and complex datasets. Advanced proficiency with Microsoft Excel, including lookup functions, pivot tables, formulas, data validation, and data comparison. Strong written and verbal communication skills. Ability to explain technical IAM issues to both technical and nontechnical audiences. Strong documentation, organization, problem-solving, and stakeholder-management skills. Preferred Qualifications Experience with Microsoft Entra ID, formerly Azure Active Directory. Experience with IAM or identity governance platforms such as SailPoint, Saviynt, Okta, Microsoft Entra ID Governance, CyberArk, or similar technologies. Experience with ServiceNow request, incident, change, or identity-related workflows. Familiarity with SQL, REST APIs, JSON, Git, source-control practices, or data-visualization tools. Knowledge of privileged access management, multifactor authentication, single sign-on, federation, and conditional-access concepts. Experience supporting access certifications, entitlement reviews, audit requests, or regulatory-control testing. Familiarity with RBAC, least privilege, segregation of duties, zero-trust principles, and identity-governance frameworks. Relevant certifications such as CBAP, CCBA, Security+, Microsoft Identity and Access Administrator, ITIL, or equivalent credentials. Technical Skills Microsoft Active Directory Microsoft Entra ID PowerShell Python Microsoft Exce ## Description job summary: Our enterprise client has an immediate opening for an experienced Business Analyst specializing in Active Directory. In this role, you'll work directly with corporate end users to define AD groups while using Excel to manage and structure access data. Deep familiarity with AD support and data analysis is essential. location: Edison, New Jersey job type: Contract salary: $50 - 75 per hour work hours: 9am to 5pm education: Bachelors responsibilities: The Business Analyst - Active Directory & Automation serves as the liaison between business stakeholders, Information Security, IAM engineering, application owners, and IT support teams. This role analyzes identity and access management processes, with a strong focus on Microsoft Active Directory, access provisioning, role and group management, and user lifecycle controls. The position combines traditional business analysis responsibilities with hands-on technical analysis using PowerShell, Active Directory reporting tools, and structured data. The analyst will identify process gaps, analyze access and group membership data, develop requirements, support remediation initiatives, and automate recurring analysis and reporting activities. The ideal candidate has a strong understanding of Active Directory structures, access governance, business process analysis, and data-driven problem solving. Key Responsibilities Business and Process Analysis * Partner with IAM, Information Security, Infrastructure, Human Resources, application owners, and business stakeholders to document active directory groups and access management requirements. * Analyze current-state IAM processes, including onboarding, transfers, terminations, access requests, approvals, provisioning, deprovisioning, and periodic access reviews. * Develop current-state and future-state process maps, business requirements, functional requirements, user stories, acceptance criteria, and workflow documentation. * Identify process gaps, control weaknesses, approval delays, manual dependencies, and opportunities for automation. * Facilitate requirements-gathering sessions, stakeholder interviews, working sessions, and process reviews. * Maintain project documentation, decision logs, requirements traceability, action items, and implementation status. Active Directory Analysis * Perform detailed analysis of Active Directory users, groups, organizational units, group memberships, nested groups, ownership, and access relationships. * Identify inactive accounts, orphaned accounts, duplicate access, excessive permissions, unmanaged groups, stale memberships, and groups without valid owners. * Analyze security groups, distribution groups, privileged groups, service accounts, shared accounts, and role-based access structures. * Support Active Directory cleanup, access certification, entitlement rationalization, group ownership validation, and remediation initiatives. * Compare requested, approved, provisioned, and removed access to identify discrepancies. * Analyze user access based on department, title, manager, location, employment status, start date, termination date, and job function. * Assist with the development and validation of role-based access control and birthright-access models. * Support investigations involving access provisioning failures, inappropriate permissions, delayed onboarding, and incomplete deprovisioning. PowerShell and Python Automation * Develop and maintain PowerShell scripts to query and analyze Active Directory objects, attributes, memberships, ownership, and account status. * Use Python to clean, transform, compare, reconcile, and analyze IAM and Active Directory datasets. * Automate recurring reports, data-quality checks, exception identification, access comparisons, and remediation tracking. * Extract and consolidate information from Active Directory, IAM platforms, ServiceNow, CSV files, Excel workbooks, databases, and other approved sources. * Build reusable scripts and analytical tools with appropriate logging, error handling, validation, and documentation. * Produce structured outputs for operational teams, auditors, control owners, and senior management. * Work with technical teams to transition approved scripts and analysis routines into controlled production processes. * Follow organizational standards for source control, code review, testing, security, and change management. IAM Governance and Controls * Support access reviews, recertification campaigns, segregation-of-duties analysis, privileged-access reviews, and audit remediation. * Validate that access requests follow established approval, authorization, and provisioning requirements. * Assist in defining IAM policies, procedures, standards, controls, and operational metrics. * Identify exceptions that may create security, regulatory, audit, or operational risk. * Support internal and external audit requests by gathering evidence, validating data, and documenting control execution. * Track IAM issues and remediation activities through completion. * Help establish measurable service levels and key performance indicators for provisioning, approvals, access removal, and exception resolution. * Promote least-privilege access, role-based access, clear group ownership, and timely removal of unnecessary access. qualifications: Required Qualifications Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Business Analysis, Information Systems, or a related discipline, or equivalent professional experience. Three or more years of experience in business analysis, identity and access management, cybersecurity, Active Directory administration, or a related technology function. Demonstrated experience analyzing Microsoft Active Directory users, groups, memberships, attributes, organizational units, and account status. Hands-on experience writing and executing PowerShell scripts for Active Directory analysis and reporting. Experience using Python for data analysis, reconciliation, automation, or reporting. Strong understanding of identity lifecycle management, including onboarding, transfers, terminations, provisioning, deprovisioning, and access certification. Experience gathering and documenting business requirements, functional requirements, user stories, workflows, and acceptance criteria. Strong analytical skills with the ability to work with large and complex datasets. Advanced proficiency with Microsoft Excel, including lookup functions, pivot tables, formulas, data validation, and data comparison. Strong written and verbal communication skills. Ability to explain technical IAM issues to both technical and nontechnical audiences. Strong documentation, organization, problem-solving, and stakeholder-management skills. Preferred Qualifications Experience with Microsoft Entra ID, formerly Azure Active Directory. Experience with IAM or identity governance platforms such as SailPoint, Saviynt, Okta, Microsoft Entra ID Governance, CyberArk, or similar technologies. Experience with ServiceNow request, incident, change, or identity-related workflows. Familiarity with SQL, REST APIs, JSON, Git, source-control practices, or data-visualization tools. Knowledge of privileged access management, multifactor authentication, single sign-on, federation, and conditional-access concepts. Experience supporting access certifications, entitlement reviews, audit requests, or regulatory-control testing. Familiarity with RBAC, least privilege, segregation of duties, zero-trust principles, and identity-governance frameworks. Relevant certifications such as CBAP, CCBA, Security+, Microsoft Identity and Access Administrator, ITIL, or equivalent credentials. Technical Skills Microsoft Active Directory Microsoft Entra ID PowerShell Python Microsoft Excel IAM and identity-governance platforms ServiceNow Data analysis and reconciliation Process mapping and requirements documentation SQL and API integration knowledge Reporting and dashboard development Git or comparable source-control tools Core Competencies Analytical thinking and structured problem solving Business and technical requirements translation IAM process and control awareness Data accuracy and attention to detail Stakeholder facilitation and communication Process improvement and automation Risk identification and escalation Documentation and knowledge management Ownership and accountability Ability to manage multiple priorities Key Measures of Success Improved accuracy and completeness of Active Directory and IAM data. Reduction in unmanaged, stale, orphaned, or incorrectly assigned access. Increased automation of recurring access-analysis and reporting activities. Timely completion of requirements, analysis, testing, and remediation activities. Improved onboarding, transfer, termination, and access-review cycle times. Clear ownership and governance of Active Directory groups and entitlements. Reduction in manual effort, provisioning errors, and audit exceptions. Effective communication of IAM risks, dependencies, and recommended actions Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status. At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact HRsupport@randstadusa.com. Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility). This posting is open for thirty (30) days. , The Business Analyst - Active Directory & Automation serves as the liaison between business stakeholders, Information Security, IAM engineering, application owners, and IT support teams. This role analyzes identity and access management processes, with a strong focus on Microsoft Active Directory, access provisioning, role and group management, and user lifecycle controls. The position combines traditional business analysis responsibilities with hands-on technical analysis using PowerShell, Active Directory reporting tools, and structured data. The analyst will identify process gaps, analyze access and group membership data, develop requirements, support remediation initiatives, and automate recurring analysis and reporting activities. The ideal candidate has a strong understanding of Active Directory structures, access governance, business process analysis, and data-driven problem solving. Key Responsibilities Business and Process Analysis * Partner with IAM, Information Security, Infrastructure, Human Resources, application owners, and business stakeholders to document active directory groups and access management requirements. * Analyze current-state IAM processes, including onboarding, transfers, terminations, access requests, approvals, provisioning, deprovisioning, and periodic access reviews. * Develop current-state and future-state process maps, business requirements, functional requirements, user stories, acceptance criteria, and workflow documentation. * Identify process gaps, control weaknesses, approval delays, manual dependencies, and opportunities for automation. * Facilitate requirements-gathering sessions, stakeholder interviews, working sessions, and process reviews. * Maintain project documentation, decision logs, requirements traceability, action items, and implementation status. Active Directory Analysis * Perform detailed analysis of Active Directory users, groups, organizational units, group memberships, nested groups, ownership, and access relationships. * Identify inactive accounts, orphaned accounts, duplicate access, excessive permissions, unmanaged groups, stale memberships, and groups without valid owners. * Analyze security groups, distribution groups, privileged groups, service accounts, shared accounts, and role-based access structures. * Support Active Directory cleanup, access certification, entitlement rationalization, group ownership validation, and remediation initiatives. * Compare requested, approved, provisioned, and removed access to identify discrepancies. * Analyze user access based on department, title, manager, location, employment status, start date, termination date, and job function. * Assist with the development and validation of role-based access control and birthright-access models. * Support investigations involving access provisioning failures, inappropriate permissions, delayed onboarding, and incomplete deprovisioning. PowerShell and Python Automation * Develop and maintain PowerShell scripts to query and analyze Active Directory objects, attributes, memberships, ownership, and account status. * Use Python to clean, transform, compare, reconcile, and analyze IAM and Active Directory datasets. * Automate recurring reports, data-quality checks, exception identification, access comparisons, and remediation tracking. * Extract and consolidate information from Active Directory, IAM platforms, ServiceNow, CSV files, Excel workbooks, databases, and other approved sources. * Build reusable scripts and analytical tools with appropriate logging, error handling, validation, and documentation. * Produce structured outputs for operational teams, auditors, control owners, and senior management. * Work with technical teams to transition approved scripts and analysis routines into controlled production processes. * Follow organizational standards for source control, code review, testing, security, and change management. IAM Governance and Controls * Support access reviews, recertification campaigns, segregation-of-duties analysis, privileged-access reviews, and audit remediation. * Validate that access requests follow established approval, authorization, and provisioning requirements. * Assist in defining IAM policies, procedures, standards, controls, and operational metrics. * Identify exceptions that may create security, regulatory, audit, or operational risk. * Support internal and external audit requests by gathering evidence, validating data, and documenting control execution. * Track IAM issues and remediation activities through completion. * Help establish measurable service levels and key performance indicators for provisioning, approvals, access removal, and exception resolution. * Promote least-privilege access, role-based access, clear group ownership, and timely removal of unnecessary access. ## Related Videos - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) - [Introducing JSON Structure](https://www.wearedevelopers.com/videos/100219-introducing-json-structure) - [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [The Best Job Search Websites of 2025](https://www.wearedevelopers.com/magazine/368-the-best-job-search-websites-of-2025) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)