IAM Directory and IGA Senior Analyst

University of Southern California • Los Angeles, CA

4d • Hybrid

About The Position

USC is expanding its Cybersecurity IAM capabilities to strengthen how identities, access and directory services are managed across the university. As the IAM Directory and IGA Senior Analyst, you will play a key technical role in designing, configuring, testing and implementing identity governance administration (IGA) and directory service solutions that support secure identity lifecycle management, authentication, authorization and access governance. This is an opportunity for an experienced IAM professional to work at the intersection of identity governance, directory services, cybersecurity and enterprise technology within a major research university. You will translate business and technical requirements into scalable IAM solutions, support enterprise application integrations, investigate complex identity and access issues, and identify opportunities to improve automation, security controls and operational effectiveness. The position reports to the IGA & Directory Services Manager and is based at USC's CAL location in a hybrid work environment.

Requirements

• Bachelor's degree in Instruction Systems Technology Or Computer Science Or in related field(s)
• 4 years in Identity and Access Management, Directory Services, Identity Governance, Information Security, Systems Administration, or related technology discipline
• Hands-on technical experience in implementing and troubleshooting of IAM solutions (e.g., SailPoint IIQ and ISC, Saviynt and Oracle Unified Directory).
• Proficiency within a Unix command line.
• Proficiency working with data, with query languages (e.g., SQL) and working with Directories (e.g., LDAP).
• Proficiency with IAM concepts (e.g., PBAC, RBAC, AuthN vs AuthZ).
• Excellent written and verbal communication skills; comfortable driving requirements gathering, architectural discussions and project reporting with non-technical business stakeholders.
• Maintain technical documentation including architecture diagrams, decision records, and runbooks.

Nice To Haves

• 6 years of experience designing, configuring, implementing or supporting enterprise IAM, IGA, directory service or authentication platforms.
• Hands-on experience with SSO solutions such as Microsoft Entra, ForgeRock, Duo, Cirrus Identity Bridge or Shibboleth.
• Experience with PAM solutions such as CyberArk or BeyondTrust.
• Experience with identity verification technologies such as Persona.
• Experience in IAM within higher education.
• Experience in other complex, decentralized environments such as healthcare, technology, media and telecommunications, or financial services is also relevant.
• Understanding of Zero Trust architecture, identity-based attack techniques, and modern IAM controls.
• Experience leading enterprise identity transformations or directory modernization programs, including migration from legacy platforms at scale.
• Experience with IAM reference architecture.
• Demonstrated ability to establish and gain visibility into service accounts and secrets in hybrid cloud and on-premises environments.
• Experience working at or with professional services firms, such as Big Four firms, and IAM software vendors.
• Project management experience on IAM projects.
• CISSP certification or similar.
• IAM software certification, such as SailPoint Certified Engineer or CyberArk Guardian.

Responsibilities

• Analyzes business and technical requirements for identity governance processes.
• Configures and enhances identity lifecycle workflows, access controls, role structures, provisioning processes and governance solutions to support operational and security requirements.
• Performs impact analysis and validates technical solutions prior to implementation.
• Designs, configures, tests and implements directory service solutions supporting authentication, authorization, identity synchronization and enterprise application integration.
• Evaluates system requirements and develops technical configurations that improve reliability, security and operational efficiency.
• Investigates complex identity, access and directory service issues. Conducts root-cause analysis, evaluates system behavior, develops corrective actions and implements sustainable technical solutions to prevent recurrence.
• Develops, configures, tests and implements integrations between identity governance platforms, directory services and enterprise applications. Validates functional requirements and ensures solutions operate in accordance with security and access management standards.
• Creates and maintains technical documentation, workflow specifications, system configurations, support runbooks and implementation procedures. Documents design decisions, testing results and operational requirements.
• Collaborates with application owners, technology teams and business stakeholders to evaluate identity and access requirements. Translates functional needs into technical specifications and recommends solutions aligned with established IAM standards.
• Evaluates existing identity governance and directory service capabilities, identifies opportunities for automation and process improvement, and recommends enhancements that strengthen service delivery, security controls and operational effectiveness.
• Maintains current knowledge of identity and access management technologies and practices.
• Encourages a workplace culture where all employees are valued, value others and have the opportunity to contribute through their ideas, words and actions, in accordance with the USC Code of Ethics.

Benefits

• The annual base salary range for this position is $118,759 - $151,880.
• USC provides benefits-eligible employees with a broad range of benefits and perks to help protect their and their dependents’ health, wealth, and future. These benefits are available as part of the overall compensation and total rewards package.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior