IAM Cybersecurity Analyst

• Serve as a subject matter expert for identity and access management solutions, including identity governance and administration (IGA), Active Directory, privileged access management (PAM), identity synchronization and provisioning, public key infrastructure (PKI), and related IAM platforms, frameworks, and tools.
• Support the development, enforcement, and remediation of IAM policies, standards, procedures, and controls.
• Participate in audits and access management process walkthroughs, address control deficiencies, and provide accurate, timely audit evidence.
• Ensure IAM activities comply with corporate policies, ethical standards, security requirements, and applicable regulations.
• Understand and be able to articulate the company s IAM strategy.
• Develop IAM metrics, KPIs and concise reports to management to track progress and measure success.
• Understand the various IAM tools and technologies available and be able to recommend solutions that will meet the company s needs.
• Lead IAM projects from planning through implementation, including requirements gathering, resource coordination, timeline management, testing, deployment, and operational transition.
• Apply security principles, including least privilege, access governance, segregation of duties, and risk-based access controls, across IAM processes and solutions.
• Manage day-to-day IAM operations, resolve escalations, and support the timely resolution of identity, access, and provisioning issues.
• Support and oversee automated identity lifecycle, access provisioning, access request, and governance processes across the organization s identity management ecosystem.
• Collaborate with cybersecurity, infrastructure, application, audit, and business teams to integrate IAM solutions effectively into the enterprise environment.
• Configure and maintain Saviynt connectors and onboard applications such as Microsoft Entra ID, Oracle EBS, and Salesforce. Responsibilities include requirements gathering, configuration, testing, troubleshooting, deployment, and ongoing support.
• Troubleshoot IGA workflows, provisioning failures, connector and integration issues, access requests, and identity lifecycle processing across integrated applications.
• Design, launch, and manage user access review and certification campaigns in Saviynt, including campaign configuration, completion tracking, escalation, and remediation.
• Build and maintain segregation of duties (SoD) rulesets and mitigating controls, and support SoD violation review and remediation.
• Configure Saviynt access request workflows, rules, and approval processes. Use Saviynt analytics and reporting capabilities to monitor performance and support audit evidence.
• Follow the company s Code of Conduct and follow all physical and digital security practices.

The ideal candidate is an experienced IAM Security Analyst who is confident, self-motivated, and brings strong interpersonal skills, initiative, and a sense of urgency. This individual will possess excellent written and verbal communication, project administration, and stakeholder management skills, along with strong analytical, problem-solving, organizational, and attention-to-detail capabilities. They should be comfortable working independently while collaborating effectively across technical, business, cybersecurity, and application teams, with a strong commitment to integrity, accountability, continuous improvement, and operational excellence., * Bachelor’s degree in Computer Science, Information Security, or a related field.

• 6+ years of experience in Identity and Access Management (IAM).
• In-depth knowledge of IAM concepts, technologies, and frameworks.
• Experience with Access Management (AM) tools such as Microsoft Azure, Okta, Oracle, or Ping Identity.
• Hands-on experience with an Identity Governance and Administration (IGA) platform required, including experience supporting or implementing IGA capabilities.
• Saviynt Identity Cloud experience is strongly preferred; experience with SailPoint, Oracle, or a similar enterprise IGA platform will also be considered.
• Knowledge or experience with Privileged Access Management solutions such as Delinea (Thycotic/Centrify), Beyond Trust, CyberArk.
• Multi-Factor Authentication technology knowledge or experience such as Azure AD MFA, Duo, Okta.
• Strong understanding of security principles, access controls, and authentication protocols.
• Proficiency in MS Office Suite (Excel, Word, PowerPoint).
• Knowledge and understanding of legal and regulatory requirements, such as: Sarbanes-Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA), Payment Card Industry/Data Security Standard, GDPR, and PIPL.
• Knowledge of information security risk management frameworks and compliance practices, including ISO 27001, SOC2 Type 2, and NIST 800-30.
• Industry certifications such as CISSP, CISM, or IAM certifications are a plus.
• Experience deploying passwordless authentication is a nice to have.
• Knowledge of Customer IAM is beneficial.
• Oracle EBS and Oracle Cloud experience preferred, including integrating Oracle applications with an IGA platform and supporting SoD controls.

Knowledge and Skills

• Advanced knowledge of identity and access management methodologies, principles, and best practices.
• Demonstrated ability to implement and manage IAM solutions that protect digital assets and support business and security requirements.
• Ability to identify IAM risks, implement appropriate mitigations, and lead the response and resolution of IAM related security incidents.
• Experience establishing IAM governance processes, policies, standards, and controls aligned with regulatory requirements and industry practices.
• Ability to define IAM metrics and key performance indicators, evaluate program effectiveness, and present clear insights about the organization s IAM posture to senior leaders.
• Knowledge of authentication technologies and protocols, including multi-factor authentication (MFA) and passwordless authentication as methods to enhance the security of user logins and transactions.
• Expertise in identity lifecycle management, including provisioning, deprovisioning, access requests, entitlement management, and access reviews.
• Strong understanding of access control models, including role-based access control (RBAC), least privilege, and privileged access management.
• Ability to translate technical and security concepts into clear business language for executives and other stakeholders.
• Ability to manage competing priorities and deliver quality results in a demanding, deadline-driven environment.
• Strong analytical and troubleshooting skills, with the ability to resolve complex IAM, integration, authentication, and access related issues.
• Strategic mindset with the ability to incorporate business requirements, security priorities, and risk considerations into technical roadmaps.

This role requires authorization to work in the U.S. without current or future visa sponsorship. This position is available on a direct W2 basis only. The expected hourly rate for this position is $50 - $62.50 per hour W2, depending on experience and qualifications. This role qualifies for comprehensive benefits such as paid time off (PTO), 401(k) eligibility, and optional medical, dental, and vision insurance. TalentFish is committed to pay transparency and equal opportunity. The compensation provided is in compliance with applicable state and federal regulations. All offers are contingent upon the completion of a background check, which may include but is not limited to reference checks, education verification, employment verification, drug testing, criminal records checks, and any required certifications or compliance requirements based on the end client’s background check policies and applicable laws.