Business Analyst - Active Directory & PowerShell

The Business Analyst - Active Directory & PowerShell serves as a liaison between business stakeholders, Information Security, IAM engineering, application owners, and IT support teams.

This role analyzes identity and access management processes, with a strong focus on Microsoft Active Directory, group and access analysis, role-based access concepts, and user lifecycle controls. The position combines business analysis responsibilities with hands-on technical analysis using PowerShell, Active Directory reporting tools, and structured data.

The analyst will identify access patterns, conduct stakeholder interviews, document business and application context, and make recommendations for group cleanup, entitlement rationalization, and access-package development.

This is primarily an analysis and recommendation role. Implementation and remediation activities will be performed by the appropriate technical and operational teams., Business and Process Analysis

• Partner with IAM, Information Security, Infrastructure, application owners, IT support teams, and business stakeholders to understand Active Directory groups and access requirements.
• Conduct stakeholder interviews and working sessions to document how access is used across applications, teams, and business functions.
• Translate technical analysis into clear recommendations for both technical and nontechnical stakeholders.

Active Directory and Access Analysis

• Extract and analyze Active Directory users, groups, memberships, nested groups, attributes, ownership, and access relationships.
• Identify group relationships and access patterns that can support role-based access and access-package design.
• Identify and recommend remediation for stale, duplicate, unmanaged, poorly owned, or inconsistently assigned groups.

PowerShell and Data Analysis

• Use PowerShell to extract and analyze Active Directory users, groups, memberships, ownership, and attributes.
• Use Excel, Python, or similar tools to clean, compare, reconcile, and report on identity data.

Experience with IAM, identity governance, role-based access control, access-package design, or entitlement rationalization.

Experience supporting Active Directory cleanup, group analysis, role mining, or access-review initiatives.

Experience using PowerShell for data analysis, reconciliation, automation, or reporting.

Experience with ServiceNow request, incident, change, or identity-related workflows.