Identity and Access Management Analyst

Position Summary

In this role, you will serve as the primary administrator and owner of the identity governance platform, overseeing both operational execution of IAM processes and the ongoing maintenance, performance, and lifecycle management of identities using the SailPoint IdentityIQ (SailPoint) application. Reporting to the Director of Cybersecurity, the successful candidate will lead IAM initiatives, manage access governance workflows, and act as the technical subject matter expert (SME) for SailPoint. Additionally, this position provides support to broader cybersecurity programs and incident response activities as necessary.

Key Responsibilities

• Identity Lifecycle Management: Manage end-to-end IAM activities, including user provisioning, deprovisioning, access reviews/changes, and policy enforcement using SailPoint. Maintain accurate identity records and ensure timely onboarding/offboarding of hospital staff and third-party users.
• SailPoint Administration: Serve as the technical owner and administrator of the SailPoint platform. Deliver user training and provide support to ensure efficient use of SailPoint. Coordinate with vendors for issue resolution and product enhancements.
• Access Governance & Compliance: Ensure compliance with internal security policies and external regulations (HIPAA, HITECH, PCI DSS). Conduct periodic access certifications. Enforce principle of least privilege (PoLP) and need-to-know principle across identities. Support audits by providing documentation and evidence of IAM controls.
• Application Onboarding & RBAC: Lead onboarding new applications into SailPoint. Develop and maintain role-based access control (RBAC) models and segregation of duties (SoD) rules.
• Documentation & Process Management: Create and maintain technical documentation for SailPoint processes, integrations, and configurations. Identify opportunities for automation and process improvements.
• Collaboration & Incident Response: Work closely with IT and business units to resolve access issues. Contribute to incident response efforts and assist with cyber threat analysis when required.
• Operational Support: Occasionally, work extended hours, including weekends and holidays, to support IAM incidents or critical upgrades.

Qualifications

• Bachelor's degree or equivalent working experience in the field.
• Minimum of two years of experience working with identity governance tools, with preferred experience with SailPoint IdentityIQ.
• Strong understanding of identity lifecycle management, access certifications, entitlement reviews, and governance policies.
• Experience with or a strong understanding of directory services (Active Directory, Azure Active Directory).
• Knowledge of regulatory and compliance requirements related to IAM.
• Strong analytical and problem-solving skills.

Skills & Preferred Qualifications

• Perform upgrades, patching, troubleshooting, and performance tuning is a plus.
• Familiarity with application onboarding and connector configuration within SailPoint is a plus.
• Experience in scripting or automation (e.g., PowerShell, Python) is a plus.
• Exposure to cybersecurity incident response and threat detection is a plus.
• Relevant certifications (e.g., SailPoint Certified IdentityIQ Engineer or Administrator, CompTIA Security+ or SSCP) are preferred.

Team Member Competencies

• Establishing Relationships: Builds effective networks, working relationships, and alliances in order to collaborate effectively within department and organization. Can relate to all kinds of people regardless of background; find topics and common interests that can be used to build rapport with others.
• Peer Support: Provides guidance and feedback to help others strengthen knowledge/skills needed to accomplish tasks, solve problems, and perform effectively within the team.
• Inspiring and Motivating Others: Fosters commitment and cohesiveness by facilitating cooperation and working as a team within the organization toward goal accomplishments. Work well with others, build consensus, and ensure cooperation to complete tasks and positive workflow.
• Demonstrating Emotional Intelligence: Exercises self-leadership, self-awareness, and self-regulation; manages emotions so that they are expressed appropriately; leads others by showcasing adaptability, empathy, and social skills.
• Acting with Integrity: Interacts with others in a way that is seen as direct and truthful; ensures confidence in individual and organizational motives and representations. Acts in a way that is consistent with personal and organizational values by keeping confidence, promises, and commitments. Clearly states goals and beliefs; informs people of their true intentions, does what they say they will do; follows through on commitments.
• Being a Champion for Change and Innovation: Supports people in their efforts to try new things. Thinks creatively, generates novel and valuable ideas and uses these ideas to develop new or improved processes. Accepts new ways of doing assesss and adapts to change.
• Communicating Effectively: Speaks and writes clearly, conveys information in a concise, organized, and logical manner. Is adept at tailoring the message to fit the interests and needs of the audience. Listens attentively and exercises tact, discretion, and diplomacy when interacting with members of the department and organization.
• Promoting Diversity and Inclusion: Treats all people with dignity and respect. Demonstrates an open-minded approach to understanding people regardless of their gender, age, race, national origin, religion, ethnicity, disability status, or other characteristics. Challenges bias and intolerance. Develops all-inclusive groups in the realms of social interaction and communication. Shows respect for the beliefs of others; encourages and promotes practices that support cultural diversity; discourages behaviors or practices that may be perceived as unfair, biased, or critical toward people with certain backgrounds.

Physical Requirements

Requires sitting for long periods of time, use of computer and other telecommunication devices. Must be able to work in a stressful environment, work independently, and be capable of critical thinking, making sound decisions, detail oriented, alert, and self-motivated.