IAM Analyst

The Identity and Access Management (IAM) Analyst is responsible for support, gathering technical requirements, assisting with technical design/architecture and evolution of the Cook Children’s Health Care System IAM services. IAM services include authentication/authorization, session management, access requests, access provisioning, access certification, access reauthorization and role/entitlement models. The IAM Analyst works with application groups during development to plan authentication and authorization. This role will also be responsible for various aspects of the IAM infrastructure support including performance monitoring, capacity management and troubleshooting. The job necessitates a strong understanding of access management concepts and technologies. The role will require the ability to define strategy, build out and support the implementation of the CCHCS IAM framework. Ability to work Remote.

• Position requires a Bachelor’s degree in the field of computer science or other related field.
• 5 years of professional experience working within an information security program requiring compliance with regulations such as HIPAA, PCI/DSS or equivalent as well as the following:
• Extensive critical thinking and troubleshooting skills.
• Excellent technical writing skills and ability to communicate effectively at all levels of the organization. Experience identifying, measuring and mitigating network security risks.

Preferred Qualifications

• Experience supporting and administering Microsoft Entra ID (Azure AD), including Conditional Access, Identity Protection, Privileged Identity Management (PIM), MFA, and SSO.
• Experience implementing or supporting Identity Governance and Administration (IGA/IDG) platforms, including access request workflows, role-based access control (RBAC), entitlement management, access certifications, separation of duties (SoD), and identity lifecycle management.
• Experience implementing, administering, or integrating Privileged Access Management (PAM) solutions such as CyberArk, BeyondTrust, Delinea, or equivalent technologies.
• Working knowledge of modern authentication and authorization standards, including SAML, OAuth 2.0, OpenID Connect (OIDC), Kerberos, LDAP, and SCIM.
• Experience integrating IAM technologies with healthcare applications such as Epic, Active Directory, HR systems, and cloud-based SaaS platforms.
• Experience leading IAM projects, developing IAM roadmaps, and collaborating with business, security, infrastructure, and application teams to implement enterprise identity solutions.
• Experience supporting compliance requirements and audit activities related to HIPAA, NIST, SOX, and/or PCI-DSS.

Certification/Licensure:

• MS AD Cert, Security+, Network+ or equivalent security certifications are a plus