IAM IT Operations Analyst I

Upbound Group•Plano, TX

2d•Onsite

About The Position

The IAM IT Operations Analyst I provides foundational operational support for identity lifecycle and access management across Microsoft Entra ID, Active Directory, ServiceNow, Workday, Microsoft 365, and downstream enterprise applications. The role processes approved access requests; supports joiner, mover, leaver, transfer, and contractor lifecycle events; troubleshoots routine identity and authentication issues; maintains accurate records; and escalates complex or security-sensitive matters to senior IAM or Cybersecurity resources. The position partners with IT Support Services, IAM Engineering, HRIS, Cybersecurity, and application support teams to deliver secure, timely, customer-focused service. The role requires on-site presence in Plano, Texas. Scheduled support and rotating on-call coverage may be required. The analyst must handle confidential information, sensitive identity data, and privileged administrative tasks responsibly, and follow established security, approval, change-management, least-privilege, segregation-of-duties, documentation, and audit requirements.

Requirements

At least 1 year of IT Support, Service Desk, IAM, or related technical support experience.
Working knowledge of Microsoft Entra ID, Active Directory, and account administration.
Familiarity with ServiceNow or comparable IT service management platforms.
Understanding of provisioning, RBAC, authentication, and MFA.
Strong troubleshooting, communication, organization, and documentation skills.
Ability to manage requests accurately, meet deadlines, and protect sensitive information.
Associate degree in Information Technology, Cybersecurity, Computer Science, or a related field is preferred; an equivalent combination of education and directly related IAM, IT operations, service desk, or technical support experience will be considered.

Nice To Haves

Experience supporting Workday-driven employee lifecycle processes.
Familiarity with Microsoft 365, enterprise application access, and SSPR.
Basic knowledge of PowerShell, scripting, or IAM automation.
Understanding of ITIL and identity governance best practices.
CompTIA Security+, Microsoft SC-900, or related certification.
Associate degree in Information Technology, Cybersecurity, Computer Science, or a related field.

Responsibilities

Provision, modify, disable, and deprovision user accounts and access according to approved requests and documented procedures.
Support joiner, mover, leaver, rehire, transfer, promotion, and contractor identity lifecycle events.
Administer users, groups, licenses, and role-based access in Microsoft Entra ID and Active Directory within assigned permissions.
Validate employee and organizational information in Workday before completing identity changes.
Fulfill approved application access requests and confirm completion with requestors.
Monitor and resolve assigned IAM incidents, service requests, and tasks in ServiceNow.
Troubleshoot routine authentication, account access, synchronization, password, MFA, and provisioning issues.
Track onboarding and access requests to support Day-1 readiness and timely completion.
Document investigation steps, approvals, actions, and outcomes accurately while meeting service-level agreements.
Escalate complex technical, automation, privileged-access, and security issues to senior IAM staff or Cybersecurity.
Follow identity verification, password recovery, and MFA security procedures.
Assist with self-service password reset (SSPR) enrollment and authentication issues.
Route restricted MFA reset requests through required Cybersecurity approval processes.
Support access reviews, account audits, and compliance activities.
Confirm access changes are approved, documented, and aligned with least privilege.
Maintain IAM knowledge articles, standard operating procedures, and support documentation.
Identify recurring issues and recommend improvements to provisioning workflows.
Assist with IAM automation initiatives, system enhancements, and operational projects.
Collaborate with Service Desk, HRIS, Cybersecurity, and application teams.
Participate in scheduled support and on-call coverage as required.