Senior Security Analyst I

This position is part of the Information Security & Risk Management (ISRM) team, providing the knowledge, tools, and governance frameworks needed to use data and technology securely while managing risk at enterprise scale. We are looking for a highly motivated, technically skilled identity professional to join our Identity and Access Management (IAM) team. This role is critical in safeguarding the enterprise by ensuring that user access is accurate, compliant, and aligned with global security standards.

The Senior Security Analyst I will drive the full lifecycle of identity governance across OIM, Saviynt, Ping, Active Directory, and other enterprise identity systems, enabling secure, seamless access for employees, contractors, and partners worldwide. The ideal candidate brings deep hands-on expertise in identity administration and governance, a strong understanding of compliance frameworks, and the ability to work independently to drive improvements across people, processes, and technology.

Responsibilities

• Act as a subject matter expert for identity lifecycle events (joiner, mover, and leaver) across global user populations, ensuring timely and accurate execution within established SLAs.
• Drive access provisioning and governance activities in accordance with least-privilege and Segregation of Duties (SoD) principles, validating approvals against business rules and compliance requirements.
• Lead and support periodic access certification and recertification campaigns within Saviynt, identifying anomalies and driving remediation.
• Create, modify, and maintain federation and SSO application integrations, resolving identity-related incidents including login failures, MFA issues, and provisioning errors.
• Identify process improvement opportunities and develop plans of action with minimal management intervention or direction.
• Collaborate cross-functionally with IT support teams, application owners, and security engineers to remediate access issues and reduce manual workload through automation.
• Maintain documentation and audit evidence to support internal and external audits, ensuring adherence to SOX, GDPR, and ISO 27001 requirements.
• Contribute to enhancements in Saviynt workflows, access request forms, and role models; support rollout of new IAM capabilities and governance policies.
• Monitor automated provisioning workflows, escalate failures, and drive continuous improvement in IAM operational reliability.

Requirements

• Strong hands-on experience with Oracle Identity Manager (OIM), Saviynt, Ping, and Active Directory.
• Demonstrated expertise in identity administration, including SSO, MFA, automated lifecycle workflows, and API integrations.
• Expert-level understanding of IAM terminology, governance frameworks, and access certification methodologies.
• Familiarity with regulatory and compliance frameworks as they apply to identity and access (SOX, GDPR, ISO 27001).
• Experience with ServiceNow for ITSM and access request workflows.
• Ability to author clear and concise incident and audit reports.
• Ability to work independently without direction for day-to-day activities, while proactively identifying and closing gaps.
• Strong communication and cross-functional collaboration skills, including the ability to translate technical concepts for non-technical stakeholders.
• Education & Experience: Minimum of 8 years of IT experience with demonstrated experience in Saviynt or Ping; OR a Bachelor's Degree in Computer Science or related technical field and 5+ years of specialized identity management experience; OR a Master's Degree in Computer Science or related technical field and 4 years of specialized experience.

Preferred Qualifications

• Experience administering identity governance in enterprise cloud environments (Azure AD, AWS IAM, or similar).
• Familiarity with scripting or automation (e.g., PowerShell, Python) to support IAM workflow improvements.
• Experience with Privileged Access Management (PAM) platforms such as BeyondTrust or CyberArk.
• Relevant certifications such as Saviynt, CISSP, or CISM.