Full Job Description
Under the general supervision of the Information Systems Security Manager, the Identity Access Management (IAM) Security Analyst is responsible for ensuring standards for IAM enterprise wide. This includes on-premises as well as cloud and SaaS based Single Sign-On setup and authentication. Working in conjunction with Infrastructure, Enterprise Systems, and Operational Support, to ensure IAM needs are adhered to in a changing environment. Responsible for the monitoring, escalation, and alerting of the SIEM for anomalies and compromises.
Job Responsibilities:
- Responsible for the daily setup, configuration, monitoring and alerting of IAM and SIEM output within the organization.
- Single Sign-On configuration methodology
- Monitor for security alerts from SIEM and other security technologies and personnel, including rotating emergency on-call rotation for 24x7 support in incident response.
- Escalate security incidents as needed to ensure MTTD and MTTR.
- Assist with threat and vulnerability tracking along with remediation.
- Perform periodic access reviews to align with least privilege methodology.
- Document security controls, including the asset or identity and the corresponding relationship data.
- Participate in security awareness activities and promote digital safety throughout the enterprise.
- Support evidence collection for compliance and audit.
- Maintaining confidentiality as appropriate with the defined data types.
- Ability and desire to learn new skills quickly are essential.
- Strong process, problem solving and project management skills.
- Excellent communication, interpersonal and customer service skills.
- Ability to interact with all areas of the enterprise (clients, IT, development, support, testing, third parties, etc.)
- Ability to multitask and manage time objectively.
- Strong written and verbal communication skills.
- Proven self-discipline and motivation.
- Proven ability to manage multiple priorities and deadlines while supporting multiple technical areas of a complex computing environment.
Education/Experience:
- 5+ years in Information Technology, and at least 2 years in an enterprise level security focused role.
- Experience with currently supported server class operating systems.
- Strong experience with identity and access principles and methodologies
- Working knowledge of Networks and a basic understanding of TCP/IP
- Multi-platform enterprise monitoring.
- Incident response and threat hunting.
Qualifications:
- Understanding of the NIST 800-171 Framework, compliance, and security technologies
- Knowledge of role in the Cybersecurity Maturity Model Certification (CMMC)
- PowerShell / KQL and other scripting languages a plus
- Microsoft Cloud Security Products and Technologies
- Microsoft Active Directory, Entra ID, and the M365 platform
- Structured problem solving
Environmental Factors and Physical Requirements:
While performing the duties of this job, team members maybe required to visit alternate locations andtherefore must have ordinary ambulatory skills sufficient to do so. This position requires the ability to stand, walk, stoop, kneel, crouch, and manipulate (lift, carry, move) light to medium weights of 10-50 pounds.Requires good hand-eye coordination, arm, hand, and finger dexterity, including ability to grasp, and visual acuity to use a keyboard,operateequipment and read application/form information. Theteammember isfrequentlyrequired to sit, reach with hands and arms, talk, and hear.
The job description will be reviewed periodically as duties and responsibilities change with business necessity.Essential and marginal job functions are subject to modification.
#LI-KF1
#LI-Hybrid
#LI-Assoc