> Markdown version of [/jobs/ext/3454766-senior-identity-and-access-management-analyst](https://www.wearedevelopers.com/jobs/ext/3454766-senior-identity-and-access-management-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Identity and Access Management Analyst - **Company:** Black & Veatch Holding Company - **Location:** Cary, NC, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Active Directory, Application Programming Interfaces (APIs), Cyber Security, Identity and Access Management, Information Technology Operations, Java Database Connectivity, Lightweight Directory Access Protocols (LDAP), Role-Based Access Control, Azure Active Directory, Systems Integration, Enterprise Software Applications, HR Software, Information Technology, Oracle HCM, SailPoint - **Published:** September 20, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=98918960671db894 ## About the Role * 5+ years of Identity and Access Management (IAM) experience. * 3+ years of hands-on SailPoint administration and implementation experience. * Experience integrating IGA platforms with Oracle HCM or similar HR systems. * Experience onboarding enterprise applications into an identity governance platform. * Experience designing role-based access control (RBAC) and persona frameworks. * Experience supporting regulated environments and audit requirements., * Bachelor's degree in Information Security or Computer Science or related field. * Minimum 10 years of overall experience in Cyber Security, IT, Risk Assessments, Privacy * Of the 10 years overall experience required, must have 5 years of experience in Governance, Risk and Compliance; and Privacy. * At least 1 certification such as CISSP, CISM, CISA, CRISC, CIPP or similar privacy certifications. * Demonstrated experience applying security and risk frameworks, regulations and privacy such as NIST CSF/800-53/800-171, NERC CIP, CIS, CMMC, SOC2, GDPR, etc. * Experience in developing security policies and standards, risk assessments, third party risk programs, risk management, risk registries, regulatory compliance, security awareness training and testing, security metrics, privacy, and other relevant GRC areas. * All applicants must be able to complete pre-employment onboarding requirements (if selected) which may include any/all of the following: criminal/civil background check, drug screen, and motor vehicle records search, in compliance with any applicable laws and regulations. Certifications Must hold at least 1 certification such as CISSP, CISM, CISA, CRISC, CIPP or similar privacy certifications. ## Description This role will be responsible for establishing and maturing the organization's identity governance capabilities, including onboarding enterprise applications, developing a comprehensive persona and role framework, defining birthright access models, implementing automated joiner-mover-leaver (JML) processes, and ensuring compliance with multiple regulatory and contractual requirements. The successful candidate will serve as a strategic technical leader, partnering with Cybersecurity, HR, IT, Audit, Compliance, and business stakeholders to deliver scalable identity governance solutions that reduce risk while improving operational efficiency., Identity Governance Program Leadership * Serve as the primary administrator and subject matter expert for the SailPoint IGA platform. * Design, implement, and maintain enterprise identity governance processes and controls. * Develop and execute the roadmap for the organization's identity governance maturity program. * Establish governance standards, policies, and operational procedures for identity lifecycle management. * Provide technical leadership and guidance for IAM and cybersecurity initiatives. SailPoint Platform Administration * Configure, administer, and optimize SailPoint. * Manage identity lifecycle workflows, certifications, provisioning, access requests, and policy enforcement. * Develop and maintain connectors, integrations, transforms, rules, workflows, and governance processes. * Monitor platform health, performance, and operational effectiveness. * Support platform upgrades, enhancements, and new feature adoption. Oracle HCM Integration & Identity Lifecycle Management * Maintain integration between Oracle HCM and SailPoint to ensure accurate identity creation, modification, and termination activities. * Design and implement automated Joiner, Mover, and Leaver (JML) processes. * Ensure workforce changes are accurately reflected across connected systems. * Develop identity data governance standards to improve data quality and consistency. Application Onboarding & Integration * Lead onboarding of enterprise applications into the SailPoint platform. * Work with application owners to define provisioning models, entitlement structures, and governance processes. * Design integration patterns utilizing APIs, SCIM, JDBC, LDAP, Active Directory, Azure AD, and other identity technologies. * Validate application access models and ensure appropriate governance controls are established. * Create and maintain onboarding documentation, support procedures, and operational runbooks. Persona Framework & Role Engineering * Design and implement an enterprise persona-based access framework. * Develop business roles, IT roles, and access profiles aligned to organizational functions. * Establish role mining and role engineering practices. * Partner with HR and business leaders to map job functions to required system access. * Continuously refine personas and role models to support least privilege and operational efficiency. Compliance, Risk & Audit Support * Support regulatory, audit, and governance activities related to identity management. * Participate in internal and external audits and remediation efforts. * Produce compliance reporting and evidence supporting access governance controls. Stakeholder Engagement * Collaborate with HR, IT Operations, Cybersecurity, Enterprise Applications, Compliance, and business stakeholders. * Facilitate workshops to define identity governance requirements. * Provide executive-ready reporting, metrics, and governance updates. ## Related Videos - [What if your HR software adapted to you, not the other way around?](https://www.wearedevelopers.com/videos/100259-what-if-your-hr-software-adapted-to-you-not-the-other-way-around) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Get Your Stack Together: Building the Right Recruiting Tech](https://www.wearedevelopers.com/videos/1295-get-your-stack-together-building-the-right-recruiting-tech) - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Key HR Trends in 2024: Overcoming a Year of Emotional Disconnect](https://www.wearedevelopers.com/videos/1271-key-hr-trends-in-2024-overcoming-a-year-of-emotional-disconnect) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)