IAM Data Analyst

The Identity Data Analyst will turn identity and access data into actionable findings, risk indicators, remediation work, and leadership reporting. This seasoned analytical role requires independent investigation of data, identification of patterns and exceptions, validation of findings with stakeholders, clear explanation of risk, and support for remediation. The analyst will work across enterprise identity, privileged-access, access, ticketing, and related operational data to help address inactive accounts, missing ownership, contractor expirations, and excessive or inconsistent access.

Responsibilities:

• Extract, normalize, analyze, and reconcile identity and access data from Active Directory, Microsoft Entra ID, privileged access management (PAM), Saviynt, Jira, and other authorized sources.

• Identify inactive, stale, orphaned, duplicate, unowned, misclassified, or inconsistent identities and entitlements.

• Analyze service accounts, application identities, privileged accounts, contractor accounts, group memberships, access assignments, and ownership records.

• Identify service accounts that have not logged in within defined periods and support ownership validation and remediation.

• Analyze contractor and contingent-worker data to identify upcoming expirations, missing owners, unresolved access, and offboarding risks.

• Investigate over-provisioned access, anomalous access patterns, toxic combinations, excessive group membership, and other identity-risk indicators.

• Build repeatable queries, scripts, extracts, reconciliation routines, dashboards, and reports that enable the identity and access management (IAM) team to take action.

• Use PowerShell, Structured Query Language (SQL), Python, application programming interfaces (APIs), spreadsheets, or comparable tools to automate data collection and analysis where appropriate.

• Trace historical tickets and operational records to identify recurring issues, bottlenecks, approval gaps, and process trends.

• Maintain data dictionaries, source-to-target mappings, analysis logic, assumptions, data-quality rules, and evidence supporting findings.

• Translate analytical findings into prioritized remediation backlogs with owners, recommended actions, due dates, dependencies, and status.

• Prepare recurring metrics and leadership reporting covering accomplishments, risks, trends, priorities, and unresolved decisions.

• Collaborate with IAM engineers, IAM leadership, identity architects, application owners, human resources, security, audit, and business stakeholders to validate findings.

• Protect sensitive identity data and follow approved handling, access, retention, and evidence-management practices.

Qualifications:

• 5 or more years of experience in information technology, identity operations, cybersecurity analytics, data analysis, systems analysis, or a related discipline.

• Demonstrated ability to analyze enterprise data and produce actionable conclusions, not merely compile reports.

• Working knowledge of Active Directory and Microsoft Entra ID identity objects, groups, roles, access assignments, service accounts, and lifecycle data.

• Experience investigating data quality, access risk, account ownership, entitlement, or operational-control issues.

• Experience with at least one scripting, query, or automation language such as PowerShell, SQL, Python, or equivalent.

• Strong spreadsheet and reporting skills, including the ability to reconcile large datasets and explain exceptions clearly.

• Ability to document analysis methods, validate data with stakeholders, and defend conclusions with evidence.

• Strong written communication and attention to detail.

• Ability to work remotely within the United States.

Preferred Qualifications:

• Experience with Saviynt, SailPoint, Microsoft Entra ID Governance, CyberArk, BeyondTrust, or another enterprise IAM platform.

• Experience with identity security posture management, access certification, role mining, entitlement analysis, or service-account governance.

• Experience with Jira data, ticket metrics, Power BI, data visualization, Representational State Transfer (REST) APIs, or identity data warehouses.

• Familiarity with Sarbanes-Oxley (SOX), information technology general controls, North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP), critical infrastructure, or cybersecurity audit requirements.

Tools and Technologies:

• Active Directory and Microsoft Entra ID

• Privileged access management platforms and enterprise IAM platforms, including Saviynt or comparable technologies

• PowerShell, SQL, Python, and REST APIs

• Jira, Power BI, spreadsheets, dashboards, and identity data warehouses

• Access records, lifecycle data, group and role data, entitlement data, and operational records