IT Analyst II - Access and Provisioning Specialist

Job Description

We are seeking an experienced IT Access & Provisioning Specialist to design, implement, and maintain automated identity lifecycle management across the enterprise with a strong focus on onboarding/offboarding automation using tools like SailPoint IdentityIQ/IdentityNow, Active Directory, and Azure AD (Entra ID).

The Specialist partners closely with Cybersecurity, IT Network & Infrastructure, application owners, business stakeholders, and compliance teams on access reviews, role-based access controls, provisioning workflows, and process improvement initiatives.

Key Responsibilities

• Design, build, and maintain automated onboarding and offboarding workflows using SailPoint (or equivalent IGA tools) integrated with Active Directory and Azure AD/Entra ID.
• Manage identity lifecycle events (joiners, movers, leavers) by automating account creation, role/group assignment, license provisioning, and deprovisioning.
• Develop and maintain connectors, rules, and workflows between SailPoint, HRIS systems (e.g., Workday), AD, Azure AD, and downstream applications.
• Configure and manage access certification campaigns, role-based access control (RBAC), and segregation of duties (SoD) policies within the IGA platform.
• Troubleshoot provisioning/deprovisioning failures, sync errors, and connector issues across AD, Azure AD, and SailPoint.
• Partner with HR, IT Service Desk, and business units to ensure timely and accurate identity data flows and lifecycle triggers.
• Create and maintain documentation for IAM processes, workflows, and standard operating procedures.
• Monitor identity-related audit logs and compliance reports to ensure adherence to internal policies and regulatory requirements (e.g., HIPAA).
• Support access request and approval workflows, ensuring least-privilege principles are enforced.
• Participate in IAM tool upgrades, testing, and continuous improvement initiatives, including scripting enhancements (PowerShell, Python, or similar) to extend automation capabilities.
• Assist in incident response related to identity and access issues, including emergency account disablement and access reviews.

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field (or equivalent work experience).
• 5+ years’ hands on experience in identity and access management and privileged access management.
• 5+ years of experience with complex, cloud-based enterprise environments.
• Strong working knowledge of Active Directory (OUs, group policy, group management) and Azure AD / Microsoft Entra ID (users, groups, conditional access, licensing).
• Experience building or supporting automated provisioning/deprovisioning workflows tied to HR systems of record.
• Familiarity with identity lifecycle concepts: joiner/mover/leaver processes, RBAC, SoD, access certifications.
• Basic scripting/automation skills (Java, PowerShell, Python, or similar) for extending or troubleshooting integrations.
• Understanding of directory synchronization tools (Azure AD Connect / Entra Connect) and SSO/federation concepts (SAML, OAuth, OIDC).
• Strong analytical and troubleshooting skills, with attention to detail in high-volume, process-driven environments.
• Excellent communication skills and ability to work cross-functionally with HR, security, and application teams.

Preferred Qualifications

• Experience with SailPoint IdentityIQ.
• SailPoint certifications (e.g., SailPoint Certified IdentityNow Engineer/Administrator).
• Experience with additional IAM/IGA/PAM tools (Okta, Ping Identity, CyberArk, Saviynt).
• Knowledge of ITSM platforms (Zendesk) for access request/ticketing integration.
• Experience supporting compliance frameworks (PCI, GLBA, HIPAA, GDPR, SOC 2 etc.).
• Familiarity with cloud platforms (AWS, Azure) IAM constructs beyond Azure AD.
• Prior experience in a regulated industry (finance, healthcare, insurance).
• Experience supporting IAM automation, APIs, integrations, or workflow enhancements.