IAM Security Analyst

About This Role

This role involves reviewing, improving, and securing identity and access management (IAM) across the organization, ensuring proper design, implementation, and monitoring of user permissions and authentication. You will focus on access governance, permission reviews, access log analysis, and continuous improvement of IAM, PAM, and secrets management practices.

Responsibilities

• Complement the User Lifecycle Management function by focusing on access governance
• Review application-by-application permission models, including available permissions, assigned roles, and detection of insecure access rights
• Validate that applications correctly enforce authentication controls, including corporate MFA
• Review and analyze access logs from identity and access-related tools
• Identify malicious, suspicious, or insecure access patterns and support investigations
• Improve and maintain the organization’s password management solution
• Analyze privileged access needs and evaluate PAM solutions in the market
• Support the selection, design, and implementation of new PAM tools
• Leverage HashiCorp Vault for secrets management when reviewing or securing applications
• Promote and support attribute-based access control (ABAC) models
• Identify risks related to access accumulation, privilege creep, and temporary access needs
• Ensure access controls follow the principle of least privilege and are aligned with business needs
• Collaborate with application owners, infrastructure teams, and other security roles to remediate access-related issues
• Ensure IAM-related findings, reviews, and actions are properly documented and tracked through Jira
• Document new procedures or update existing ones related to IAM, access reviews, PAM, and secrets management
• Create reports related to access reviews, MFA coverage, privileged access, and IAM risks
• Engage in ongoing training and professional development to stay current with IAM, PAM, and identity security best practices
• Share knowledge and expertise to foster a culture of secure access and identity governance

Requirements

• 3+ years experience in IAM, access governance, or identity-related security roles
• Hands-on experience reviewing user permissions and access models across multiple applications
• Experience working with directory services and identity platforms (e.g. Active Directory, Azure AD)
• Experience analyzing authentication and access logs
• Understanding of MFA, conditional access, and identity-based security controls
• Familiarity with password management and privileged access management concepts
• Experience working with or integrating secrets management solutions
• Strong analytical mindset with attention to detail
• Ability to work independently and as part of the Information Security Team
• Strong documentation and reporting skills
• Solid foundations in authentication flows, authorization models, and cybersecurity

Qualifications

• Bachelor's Degree in computer science, telecommunications, cybersecurity, or other related academic fields
• At least 3 years of work experience in IAM, access governance, or identity-related security roles

Nice to Have

• Any cybersecurity certification
• Familiarity with IAM governance and access review processes
• Experience with Privileged Access Management (PAM) solutions
• Familiarity with secrets management tools such as HashiCorp Vault or ManageEngine Password Manager
• Understanding of Attribute-Based Access Control (ABAC) models
• Familiarity with security standards and frameworks such as ISO 27001, NIST, or similar

Skills

* Required skills

Benefits