Jobs · North Carolina

Senior Identity and Access Management Analyst

Black & Veatch · Cary, NC · 1 mo ago
Full-time
We need to output HTML fragment with sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We need to parse the posting. First, remove boilerplate: date, location repeated, company description repeated, etc. Keep substantive info. We need to produce headings with

and then content:

for prose,

  • for lists. We must not repeat job title as heading. The job title is Senior Identity Governance & Administration (IGA) Analyst. Not to be used as heading. We need sections: - About the role: likely from "The Opportunity" paragraph describing role. Could be considered About the role. - Responsibilities: list of key responsibilities bullet points. - Requirements: maybe Minimum Qualifications? Or Preferred Qualifications? The posting has "Preferred Qualifications" and "Minimum Qualifications". Both could go under Requirements or Qualifications. The instruction: Use sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we need to map. We have qualifications: Minimum Qualifications (education, experience, certifications). Preferred Qualifications (years experience, etc). Skills: maybe list of specific skills (SailPoint administration, Oracle HCM integration, etc). Could be under Skills. Benefits: there is a paragraph about benefits portfolio: health care, dental, vision, disability, wellness program, flexible work schedules, paid vacation, holiday, sick time, dependent sick time, company-matched 401k, adoption reimbursement, tuition reimbursement, vendor discounts, employment referral program, AD&D insurance, pre-taxed accounts, voluntary legal plan, B&V Credit Union, performance-based bonus program, ESOP ownership. Pay: there is "Salary Plan ITS: Information Technology Service Job Grade 017". That's pay info. So we can include Pay section with that. Schedule: maybe mention hybrid/flexible work options after first 90 days. That's schedule info. So include Schedule. We must not include sections with filler like "commensurate with experience". Not present. We need to preserve all substantive info; do not invent or summarize away detail. So we need to include details from the posting. Let's extract: About the role: The Opportunity paragraph: "We are seeking a highly skilled Senior Identity Governance & Administration (IGA) Analyst to lead the administration, design, and expansion of our enterprise Identity Governance program utilizing a platform integrated with a new Oracle HCM as the authoritative source of identity data. This role will be responsible for establishing and maturing the organization's identity governance capabilities, including onboarding enterprise applications, developing a comprehensive persona and role framework, defining birthright access models, implementing automated joiner-mover-leaver (JML) processes, and ensuring compliance with multiple regulatory and contractual requirements. The successful candidate will serve as a strategic technical leader, partnering with Cybersecurity, HR, IT, Audit, Compliance, and business stakeholders to deliver scalable identity governance solutions that reduce risk while improving operational efficiency." That's substantive. Responsibilities: list under "Key Responsibilities" with subheadings: Identity Governance Program Leadership, SailPoint Platform Administration, Oracle HCM Integration & Identity Lifecycle Management, Application Onboarding & Integration, Persona Framework & Role Engineering, Compliance, Risk & Audit Support, Stakeholder Engagement, Management Responsibilities (Individual Contributor). We need to turn each bullet into list items. The subheadings could be part of list items or we could keep as separate headings? But instruction: Use
    • for any list of duties/requirements/benefits. So we can make a list where each item includes the subheading bold? But we cannot add extra tags besides

      ,

      ,

        ,
      • . We could embed the subheading as plain text inside
      • . That's fine. Thus Responsibilities
        • ... each duty. We need to capture all details under each subheading. Let's extract each: Identity Governance Program Leadership: - Serve as the primary administrator and subject matter expert for the SailPoint IGA platform. - Design, implement, and maintain enterprise identity governance processes and controls. - Develop and execute the roadmap for the organization's identity governance maturity program. - Establish governance standards, policies, and operational procedures for identity lifecycle management. - Provide technical leadership and guidance for IAM and cybersecurity initiatives. SailPoint Platform Administration: - Configure, administer, and optimize SailPoint. - Manage identity lifecycle workflows, certifications, provisioning, access requests, and policy enforcement. - Develop and maintain connectors, integrations, transforms, rules, workflows, and governance processes. - Monitor platform health, performance, and operational effectiveness. - Support platform upgrades, enhancements, and new feature adoption. Oracle HCM Integration & Identity Lifecycle Management: - Maintain integration between Oracle HCM and SailPoint to ensure accurate identity creation, modification, and termination activities. - Design and implement automated Joiner, Mover, and Leaver (JML) processes. - Ensure workforce changes are accurately reflected across connected systems. - Develop identity data governance standards to improve data quality and consistency. Application Onboarding & Integration: - Lead onboarding of enterprise applications into the SailPoint platform. - Work with application owners to define provisioning models, entitlement structures, and governance processes. - Design integration patterns utilizing APIs, SCIM, JDBC, LDAP, Active Directory, Azure AD, and other identity technologies. - Validate application access models and ensure appropriate governance controls are established. - Create and maintain onboarding documentation, support procedures, and operational runbooks. Persona Framework & Role Engineering: - Design and implement an enterprise persona-based access framework. - Develop business roles, IT roles, and access profiles aligned to organizational functions. - Establish role mining and role engineering practices. - Partner with HR and business leaders to map job functions to required system access. - Continuously refine personas and role models to support least privilege and operational efficiency. Compliance, Risk & Audit Support: - Support regulatory, audit, and governance activities related to identity management. - Participate in internal and external audits and remediation efforts. - Produce compliance reporting and evidence supporting access governance controls. Stakeholder Engagement: - Collaborate with HR, IT Operations, Cybersecurity, Enterprise Applications, Compliance, and business stakeholders. - Facilitate workshops to define identity governance requirements. - Provide executive-ready reporting, metrics, and governance updates. Management Responsibilities: - Individual Contributor (maybe just that line). Could be a list item: "Individual Contributor". Now Requirements: Could be Minimum Qualifications? Let's extract Minimum Qualifications: "Bachelor's degree in Information Security or Computer Science or related field. Minimum 10 years of overall experience in Cyber Security, IT, Risk Assessments, Privacy Of the 10 years overall experience required, must have 5 years of experience in Governance, Risk and Compliance; and Privacy. At least 1 certification such as CISSP, CISM, CISA, CRISC, CIPP or similar privacy certifications. Demonstrated experience applying security and risk frameworks, regulations and privacy such as NIST CSF/800-53/800-171, NERC CIP, CIS, CMMC, SOC2, GDPR, etc. Experience in developing security policies and standards, risk assessments, third party risk programs, risk management, risk registries, regulatory compliance, security awareness training and testing, security metrics, privacy, and other relevant GRC areas. All applicants must be able to complete pre-employment onboarding requirements (if selected) which may include any/all of the following: criminal/civil background check, drug screen, and motor vehicle records search, in compliance with any applicable laws and regulations." That's a lot. We'll put under Requirements as list items. Qualifications: maybe Preferred Qualifications: "5+ years of Identity and Access Management (IAM) experience. 3+ years of hands-on SailPoint administration and implementation experience. Experience integrating IGA platforms with Oracle HCM or similar HR systems. Experience onboarding enterprise applications into an identity governance platform. Experience designing role-based access control (RBAC) and persona frameworks. Experience supporting regulated environments and audit requirements." Also Certifications: "Must hold at least 1 certification such as CISSP, CISM, CISA, CRISC, CIPP or similar privacy certifications." This is already in Minimum Qualifications but also repeated. We'll keep maybe under Qualifications. Skills: Could be specific technical skills: SailPoint administration, Oracle HCM integration, IAM, RBAC, persona framework, JML processes, API/SCIM/JDBC/LDAP/AD/Azure AD, role mining, compliance reporting, stakeholder engagement, etc. We can extract from responsibilities and qualifications. But we need to avoid duplication; still we can list skills as bullet list. Benefits: paragraph about benefits portfolio. Pay: "Salary Plan ITS: Information Technology Service Job Grade 017". That's it. Schedule: "Hybrid or flexible work options may be offered after the first 90 days of employment based upon manager discretion, job performance and work assignments." Now we need to output only HTML fragment, no extra markdown. We'll structure:

          About the role

          ... (the opportunity paragraph)

          Responsibilities

          • Identity Governance Program Leadership: Serve as the primary administrator and subject matter expert for the SailPoint IGA platform. Design, implement, and maintain enterprise identity governance processes and controls. Develop and execute the roadmap for the organization's identity governance maturity program. Establish governance standards, policies, and operational procedures for identity lifecycle management. Provide technical leadership and guidance for IAM and cybersecurity initiatives.
          • SailPoint Platform Administration: Configure, administer, and optimize SailPoint. Manage identity lifecycle workflows, certifications, provisioning, access requests, and policy enforcement. Develop and maintain connectors, integrations, transforms, rules, workflows, and governance processes. Monitor platform health, performance, and operational effectiveness. Support platform upgrades, enhancements, and new feature adoption.
          • Oracle HCM Integration & Identity Lifecycle Management: Maintain integration between Oracle HCM and SailPoint to ensure accurate identity creation, modification, and termination activities. Design and implement automated Joiner, Mover, and Leaver (JML) processes. Ensure workforce changes are accurately reflected across connected systems. Develop identity data governance standards to improve data quality and consistency.
          • Application Onboarding & Integration: Lead onboarding of enterprise applications into the SailPoint platform. Work with application owners to define provisioning models, entitlement structures, and governance processes. Design integration patterns utilizing APIs, SCIM, JDBC, LDAP, Active Directory, Azure AD, and other identity technologies. Validate application access models and ensure appropriate governance controls are established. Create and maintain onboarding documentation, support procedures, and operational runbooks.
          • Persona Framework & Role Engineering: Design and implement an enterprise persona-based access framework. Develop business roles, IT roles, and access profiles aligned to organizational functions. Establish role mining and role engineering practices. Partner with HR and business leaders to map job functions to required system access. Continuously refine personas and role models to support least privilege and operational efficiency.
          • Compliance, Risk & Audit Support: Support regulatory, audit, and governance activities related to identity management. Participate in internal and external audits and remediation efforts. Produce compliance reporting and evidence supporting access governance controls.
          • Stakeholder Engagement: Collaborate with HR, IT Operations, Cybersecurity, Enterprise Applications, Compliance, and business stakeholders. Facilitate workshops to define identity governance requirements. Provide executive-ready reporting, metrics, and governance updates.
          • Management Responsibilities: Individual Contributor.

          Requirements

          • Bachelor's degree in Information Security or Computer Science or related field.
          • Minimum 10 years of overall experience in Cyber Security, IT, Risk Assessments, Privacy.
          • Of the 10 years overall experience required, must have 5 years of experience in Governance, Risk and Com

Similar jobs