Sr. Identity and Access Management Analyst

About the role

Justworks is seeking an experienced Identity and Access Management (IAM) analyst to enhance our IAM program and maturity. This role involves partnering with business stakeholders to define and implement roles, rules, permissions, and accesses, and collaborating with IAM engineers to build security solutions.

Responsibilities

• Partner with business stakeholders to analyze and define role-based access control (RBAC) requirements and permission models
• Conduct access reviews and collaborate with business units to establish appropriate access levels and segregation of duties
• Translate business requirements into technical IAM specifications and access policies
• Facilitate workshops and requirements gathering sessions with cross-functional teams
• Assist IAM Implementation
• Design and document access control matrices, role hierarchies, and permission structures
• Auxiliary in the deployment and configuration of identity management solutions across enterprise systems
• Coordinate with technical teams to ensure proper integration of IAM systems with business applications
• Support Process Improvement
• Evaluate and improve IAM processes, workflows, and user experiences
• Create and maintain comprehensive documentation for IAM processes, procedures, and system configurations
• Develop training materials and provide guidance to end users and business stakeholders
• Analyze access patterns and recommend optimization opportunities
• Support Security Management and Risk Management
• Develop, maintain, and enforce IAM policies, standards, and procedures
• Assess and document access-related risks and recommend appropriate mitigation strategies
• Investigate and resolve access-related security incidents and policy violations
• Support privilege access management (PAM) initiatives and monitor high-privilege account usage
• Collaborate with Cyber Defense Operations to triage incidents, especially related to IAM
• Work with Internal Audit, IT, and Digital Security to address access review gaps and ensure compliance with security policies and regulatory requirements
• Perform other related duties as assigned

Qualifications

• 5+ years of hands-on experience in identity and access management, preferably in technology companies or enterprise environments
• 3+ years of experience with RBAC design, implementation, and management
• Extensive experience in the framework and process to define roles and permissions in IGA or RBAC implementations
• Proven experience working with business stakeholders to gather requirements and translate them into access control specifications
• Solid experience with IAM tools and platforms (e.g., AD, Okta, SailPoint, ForgeRock, CyberArk, or similar)
• Demonstrated experience conducting access reviews, certifications, and compliance audits
• Strong understanding of identity and access management concepts, protocols, and standards (SAML, OAuth, OpenID Connect, LDAP)
• Proficiency with directory services and identity providers
• Knowledge of privileged access management (PAM) concepts and tools
• Familiarity with segregation of duties (SoD) principles and risk-based access controls
• Experience with cloud IAM platforms (AWS IAM, Azure AD, Google Cloud IAM)
• Knowledge of zero trust architecture and modern identity security concepts
• Experience with automated provisioning and deprovisioning workflows
• Familiarity with IT service management (ITSM) tools and processes

Benefits

The base wage range for this position based in our New York City Office is targeted at $166,000 - $214,000 per year. Actual compensation is based on multiple factors that are unique to each candidate, including and not limited to skill set, level of relevant experience, and specific work location.