Lead IAM Systems Analyst & Product Owner

This highly visible, leadership-focused role serves as the central liaison between business stakeholders and the technical IAM Engineering team. The individual acts as the “Product Owner” for the Identity & Access Management (IAM) domain, leveraging expert-level technical knowledge of IAM platforms and strong systems analysis skills to drive daily operations, project delivery, and strategic product evolution., 1. IAM Product Ownership & Governance

• Act as the daily sounding board for IAM rules, schedule, and provisioning through the SailPoint IIQ (CAPS) or similar platform.
• Serve as the “product owner” for IAM Engineering on Sprint scope, actively curating the IAM Jiras to define what has been delivered and prioritizing what is in scope to fix or enhance.
• Lead daily IAM stand-up meetings to prioritize work across ServiceNow incidents, tickets, and IAM Jira items.
• Lead retrospectives for continuous improvement of IAM processes and team performance.
• Proactively determine and resolve blocking issues on IAM incidents, requests, or enhancements by collaborating with business owners and other technology teams.

1. Technical Systems Analysis & Design

• Possess a deep understanding of how SailPoint lifecycle, tasks, roles, and rules already function to accurately answer questions regarding future design or the rationale behind current configurations.
• Provide leadership, guidance, and research to manage assigned IAM projects, adhering to System Development Life Cycle (SDLC) methodology guidelines.
• Troubleshoot, analyze, and gather requirements for optimal IAM solutions, providing leadership to resolve complex technical issues.
• Work with managed services or vendor teams (e.g., CDW) to identify improvements, risks, or enhancements based on their subject matter expertise in IAM platforms.
• Provide active feedback and troubleshooting on incidents or requests assigned to IAM Engineering, clarifying technical requirements with the team as needed.

1. Stakeholder Management & Collaboration

• Coordinate directly between business stakeholders and the IAM Engineering team to define the scope, priority, impact, and design for fixes and requests.
• Represent IAM (IT Security) on cross-team efforts and troubleshooting, specifically coordinating with teams managing systems like Workday P&C, Epic, Lenel, Network Infrastructure, Okta, and Exchange Online.
• Consult with internal staff and management to assign and prioritize needs based on hospital-wide/organizational objectives and initiatives.
• Ensure users and stakeholders are adequately informed of initiatives, status, and operational impacts.

1. Quality, Compliance & Documentation

• Ensure all IAM changes are validated and safe for production, including strict adherence to RFC approvals, deployment notifications, and build/peer reviews.
• Document requests and findings, and facilitate training/education on application issues.
• Integrate business needs with technology and standards related to identity creation, deletions, vaulting, and password management.
• Support the larger IT Security team from an IAM perspective on capabilities and priority tasks.

• Minimum of 7 years’ experience in an Information Services environment, with at least 4-6 years focused on Identity and Access Management.

Technical Expertise

• Minimum of 4 years’ experience with SailPoint engineering and/or architecting, specifically SailPoint IdentityNow (IDN) or SailPoint Identity Security Cloud (ISC).

Education

• Bachelor’s degree in a relevant field (Computer Science, Business Administration, etc.) OR equivalent experience that demonstrates technical competency.

Core Skills

• Proven experience and knowledge of project management skills, tools, and methodologies. Proven experience leading committees, projects, and activities.

IAM Knowledge

• Advanced understanding of IAM platforms (SailPoint, Okta, CyberArk). Experience with access management frameworks (RBAC/ABAC/PBAC).

What Would Be Nice for You to Have:

• Expert knowledge of access management frameworks.
• Deep understanding of Microsoft Active Directory and cloud platforms (AWS, GCP, Entra).
• Proficiency in automation tools (PowerShell, RPA, SQL, Power Automate).
• Experience with Privileged Access Management tools
• Working knowledge of HR and Payroll workflow, data elements, and system integration