> Markdown version of [/jobs/ext/2694443-security-senior-analyst-identity-security-engineering](https://www.wearedevelopers.com/jobs/ext/2694443-security-senior-analyst-identity-security-engineering). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Senior Analyst - Identity Security Engineering

- **Company:** Elevance Health
- **Location:** St. Louis, MO, United States
- **Experience:** Expert
- **Contract:** Temporary contract
- **Skills:** Application Programming Interfaces (APIs), Data Analysis, Cloud Computing, Cloud Computing Security, Configuration Management Databases, Cyber Security, Computer Networks, Disaster Recovery, Middleware, Identity and Access Management, Intrusion Detection and Prevention, Kerberos (Protocol), Network Security, Lightweight Directory Access Protocols (LDAP), OAuth, Role-Based Access Control, Openid Connect, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), Data Logging, Scripting, Google Cloud, Cyberark, SailPoint, Restful APIs, Network Server, Software Version Control, Servicenow
- **Published:** September 3, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3375532427&tx=KR4141FFF&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Requires a bachelor's degree or equivalent combination of education and experience that would provide the knowledge to perform such work.
 * Experience must include a minimum of 3 years of experience in a support and operations or design and engineering role in any of the following areas: access management or network security technologies, servers, networks, network communications, telecommunications, operating systems, middleware, disaster recovery, collaboration technologies, hardware/software support or other infrastructure services role; or any combination of education and experience, which would provide an equivalent background.

Preferred Skills, Capabilities and Experiences:

 * Three to five years of experience in Identity Security, IAM, PAM, IGA, access engineering, or security operations preferred.
 * Hands-on experience with CyberArk Idira EPM; familiarity with CyberArk PAM, PSM, Privilege Cloud, or related privileged access technology preferred.
 * Strong understanding of least privilege, JIT access, ZSP, Zero Trust, privileged-access tiering, and Identity Threat Detection preferred.
 * Experience applying RBAC, ABAC, policy-based access, risk-based access, and role or entitlement design preferred.
 * Understanding of Identity Governance processes, including joiner-mover-leaver lifecycle, access requests, certifications, segregation of duties, and exception governance preferred.
 * Familiarity with NHI, workload, cloud, and agentic AI identities, including service accounts, secrets, certificates, and access controls in Microsoft Entra ID, AWS IAM, and Google Cloud preferred.
 * Knowledge of IAM standards and protocols such as SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos, and REST APIs preferred.
 * Experience using scripting, query, workflow, or low-code tools to automate identity discovery, AD/LDAP queries, entitlement analysis, access lifecycle workflows, reporting, and audit evidence preferred.
 * Strong foundation in identity-focused automation and orchestration, including APIs, AD/LDAP queries, data analysis, reusable workflows, logging, error handling, testing, version control, and secure credentials preferred.
 * Experience supporting large, regulated, and highly available enterprise environments; relevant CyberArk, identity, cloud, or security certifications preferred.

## Description

Location: This role requires associates to be in-office 1 day per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. This approach combines structured office engagement with the autonomy of virtual work, promoting a dynamic and adaptable workplace. Ideal candidates will be able to report to one of our Pulse Point locations in Indianapolis, IN or St. Louis, MO. Alternate locations may be considered if candidates reside within a commuting distance from an office.

Please note that per our policy on hybrid/virtual work, candidates not within a reasonable commuting distance from the posting location(s) will not be considered for employment, unless an accommodation is granted as required by law.

The Security Senior Analyst - Identity Security Engineering is responsible for engineering and operating identity security controls across human, privileged, non-human, cloud, and emerging agentic AI identities. The role has a primary focus on CyberArk Idira Endpoint Privilege Manager (EPM), with supporting responsibilities across CyberArk PAM and PSM capabilities, and helps advance least privilege, Just-in-Time access, Zero Standing Privilege, software control, and privileged access governance. This role partners with IAM, Identity Governance, Cyber Security, Cloud Security, Infrastructure, ServiceNow, and application teams to design, automate, monitor, and continuously improve secure access while supporting operational, audit, compliance, and 24x7 service requirements.

How you will make an impact:

 * Engineers and operates CyberArk Idira EPM, including policy design, application control, software-installation governance, temporary elevation, agent health, and troubleshooting.
 * Supports CyberArk PAM and PSM capabilities, including privileged credentials, session controls, emergency access, and JIT/ZSP use cases.
 * Translates business and security requirements into RBAC, ABAC, policy-based, risk-based, and time-bound access controls.
 * Supports identity governance processes, including access requests, approvals, provisioning, certification, revocation, segregation of duties, and exception management.
 * Extends identity security controls across workforce identities, privileged accounts, service and workload identities, NHIs, cloud identities, and agentic AI identities.
 * Integrates CyberArk capabilities with ServiceNow, SailPoint, directories, CMDB, and cloud platforms using supported APIs and workflow automation.
 * Automates identity discovery, directory queries, entitlement analysis, reconciliation, telemetry, reporting, and audit evidence using secure and supportable engineering practices.
 * Analyzes telemetry, audit records, and identity security events to identify misuse, policy gaps, access drift, and opportunities to reduce standing privilege.
 * Develops testing plans, operational procedures, runbooks, metrics, and audit evidence while supporting incident investigation, root-cause analysis, and continuous improvement.


## Related Videos

- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Advanced Cypress: custom assertions and tasks](https://www.wearedevelopers.com/videos/790-advanced-cypress-custom-assertions-and-tasks)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)