Your opportunity
The Senior Identity Security Analyst is responsible for the day-to-day operations, continuous improvement of Identity Security services. This hands-on role supports Joiner, Mover, and Leaver (JML) processes, access requests, Active Directory and Microsoft Entra ID administration, Privileged Access Management (PAM), identity-related security alerts, and audit activities. The individual is accountable for maintaining identity platform integrity through directory hygiene, lifecycle governance, enforcement of Identity Security standards, and remediation of dormant, orphaned, duplicate, and non-compliance accounts, groups, roles and other identity objects.
The role partners closely with IAM Engineering, Infrastructure, Security Operations, Audit, Risk, and the People Team to ensure identity processes remain effective, auditable, and aligned to least-privilege and Zero Trust principles. Senior Analysts are expected to identify opportunities to improve processes through standardization, automation, analytics, and responsible use of AI-enabled technologies while maintaining a strong understanding of Identity Security and broader cybersecurity concepts. The successful candidate will proactively identify risk, improve operational efficiency, support audit readiness, and contribute to the continued maturity of the Identity Security Program.
What to expect when you join our firm
- Hybrid working and reasonable accommodations
- Generous Holiday policies
- Excellent Health and Wellbeing benefits including corporate membership to Wellhub
- Paid volunteer time to step away from your desk and into the community
- Support to grow through professional development courses, tuition/qualification reimbursement and more
- Maternal/paternal leave benefits and family services
- Unique employee events and programs including a 14er challenge
- Complimentary beverages, snacks and all employee Happy Hours
Must have skills
- Proven experience executing day-to-day Identity Security operations, including Joiner/Mover/Leaver (JML) processing, access requests, and ticket-based workflows in an enterprise environment.
- Strong hands-on experience administering and maintaining Active Directory and Microsoft Entra ID, including account lifecycle management, group and role management, and directory hygiene activities.
- Experience maintaining and enforcing Identity Security standards, procedures, and controls, including directory hygiene, lifecycle governance, and compliance requirements.
- Demonstrated ability to manage multiple concurrent tasks, meet deadlines consistently, and proactively communicate risks or delays in a fast-paced operational environment.
- Experience monitoring and responding to identity-related security alerts (e.g., Netwrix or similar tools), performing initial analysis, remediation, or escalation as appropriate.
- Experience supporting PAM processes, including privileged account onboarding, maintenance, hygiene cleanup, and least-privilege enforcement.
- Ability to support internal and external audits by providing evidence, responding to inquiries, and remediating identity-related findings in regulated environments.
- Experience working within a ticket queue model (ServiceNow or equivalent), adhering to SLAs, documenting work accurately, and maintaining operational reliability.
- Carry out other duties as assigned
Nice to have skills
- Hands-on experience with SailPoint ISC, Identity IQ(or similar IGA platforms) for identity lifecycle management, access governance, or entitlement cleanup.
- Experience identifying manual IAM processes and contributing to improvements, standardization, or automation initiatives.
- Familiarity with Netwrix, identity analytics, or directory monitoring tools beyond basic alert triage.
- Experience working in environments subject to SOX, SOC, ISO, or similar regulatory requirements.
- Familiarity with cloud identity and access management concepts, including federations, SSO, MFA, and conditional access.
- Experience with CyberArk, Britive, Delinea, or comparable PAM solutions.
- Experience partnering with Infrastructure, Security Operations, HR, and Audit teams to drive cross-functional identity initiatives.
- Basic scripting or technical skills (e.g., PowerShell) to assist with reporting, cleanup, or operational efficiency.
Supervisory responsibilities
Potential for growth
- Mentoring
- Leadership development programs
- Regular training
- Career development services
- Continuing education courses
Compensation information
The base salary range for this position is $100,000-$105,000. This range is estimated for this role. Actual pay may be different. This position will be open through September 30, 2026.
Colorado law requires an estimated closing date for job postings. Please don't be discouraged from applying if you see this date has passed.#LI-LN2 #LI-Hybrid
Annual Bonus Opportunity: Position may be eligible to receive an annual discretionary bonus award from the profit pool. The profit pool is funded based on Company profits. Individual bonuses are determined based on Company, department, team and individual performance.
Benefits: Janus Henderson is committed to offering a comprehensive total rewards package to eligible employees that includes; competitive compensation, pension/retirement plans, and various health, wellbeing and lifestyle benefits. To learn more about our offerings please visit the Why Join Us section on the career page here.
