Senior Identity Access Management Analyst

About the position As a Senior Identity Access Management (IAM) Analyst with TQL, you will serve as a technical lead for IAM projects, mentor junior analysts, and partner closely with IT, security, HR, and business stakeholders to ensure that only the right people have the right access to the right resources at the right time - supporting TQL's commitment to secure, efficient and scalable operations. This role will involve designing, configuring and supporting IAM solutions while collaborating with stakeholders to modernize identity management processes across the organization. Responsibilities • Collaborate with the IAM Architect to implement access governance process in alignment with enterprise policies and industry best practices • Design roles (role-based access control and attribute-based access control), workflows and certifications for implementation in IAM systems and Privileged Access Management (PAM) solutions • Define and control identification, authentication and privileges in an extended Microsoft environment • Collaborate with HR and IT to ensure user lifecycle events (onboarding, offboarding, role changes) are accurately and promptly reflected in systems • Collaborate with Application Security team and DevOps teams to ensure service accounts (non-human identities) are appropriately secured • Configure and maintain IAM and PAM systems, including connectors, provisioning rules and application onboarding • Write code for custom connectors within the IAM system for applications without out-of-the-box connectors • Implement and troubleshoot integrations for SSO, SAML, OIDC and SCIM following architecture guidelines • Develop user access/activity reports to support access recertification, business unit and regulatory requests • Identify areas for automation and continuous improvement of the IAM function to enable the business to operate more efficiently and effectively • Provide training and support to internal teams and end-users on IAM processes and tools Requirements • Bachelor's degree in computer science, technology, or a related field required • 4-5 years hands-on IAM experience in enterprise environments required • Relevant certifications preferred (e.g. Microsoft Certified: Identity and Access Administrator Associate, Okta Certified Professional, SailPoint Certified Engineering, CyberArk Trustee, etc) • Scripting or programming experience (PowerShell, Python, Java or C#) for automation and integrations • Proficiency with IAM tools such as SailPoint, Microsoft Entra ID, Okta or CyberArk • Strong working knowledge of directory services (Active Directory, Azure AD) and cloud identity platforms (AWS, Azure, GCP) • Advanced of IAM principles, RBAC/ABAC, MFA, SSO and provisioning workflows • Ability to configure and troubleshoot IAM systems with minimal supervision Benefits • $105,000 - $150,000 base salary, benefits package and company perks • Advancement opportunities with aggressive and structured career paths • TQL's IT Team offers a hybrid work environment with the ability to work remotely 40 hours per month • Access to the latest emerging technologies • Reimbursement for continuous education and technical training • Voted a 2019-2024 Computerworld Best Places to Work in IT Apply tot his job