Identity & Access Management Analyst

U.S. Financial Technology•Remote,

3d•$94,250 - $107,500•Remote

About The Position

U.S. FinTech is seeking an experienced Identity & Access Management Analyst to join their team. This is a full-time remote opportunity. U.S. FinTech operates the largest mortgage securitization platform globally, supporting significant market share and providing comprehensive services for mortgage-backed securities. Their cloud-based platform executes transactions at scale, combining financial services expertise with technological innovation.

Requirements

Bachelor's degree or equivalent experience in an IT related field.
A minimum of 2 years' experience with Identity and Access Lifecycle Management Operations and Controls.
Supporting and operating Cloud IAM Services, AWS preferred (Access Management, Roles, Policies and Access Reporting).
Supporting MS Active Directory Domain Services, Azure Active Directory (MS Entra ID), Azure Web Federation and Active Directory Connect.
A minimum of 1 years' experience supporting Privileged Identity Management Tools (TSS, AWS SS, and others).
A minimum of 1 years' experience with Scripting (PowerShell, JSON, and Python etc.).
Experience with operating IAM controls aligned with ISO 27001/2, FISMA or National Institute of Standards and Technology (NIST) guidelines is essential.
Candidate must have experience working across teams and effectively deliver IAM services across business lines.
Candidate should have a working knowledge and practical use of Sailpoint IdentityNow, Okta, common OS and domain structures, LDAP, servers, services, and their use of directory services.
Hands on experience with MS Directory Services Products (Active Directory, Azure, Entra ID, Office 365, Exchange, Sharepoint, MS Teams).
Hands on experience with ServiceNow Ticketing System for integration with Sailpoint and other connected systems.
Candidate should have working experience with managing Access Certification campaigns in Sailpoint as part of Identity Lifecycle Management.
Candidate should have experience with enabling automation for identity lifecycle management and with scripting technologies.
Candidate should have experience with Windows, Linux, Red Hat, etc. hosts, operating systems and applications.
Candidates must possess excellent interpersonal skills, presentation skills, and verbal / written communication skills with an ability to document and explain processes and procedures to both business and technical stakeholders.
Ability to influence peers and management; ability to team cross-functionally and form relationships to achieve objectives.
Candidate should have a solid understanding of information security policies, standards, and industry leading practices.
Self-starter; adaptable to change; motivated to set personal and program goals and proactively track performance against goals and initiatives.
Candidate must demonstrate organizational skills with respect to time management and work production.
Ability to manage multiple priorities – projects, deliverables, and stakeholders.
Willingness to learn new technology, tools and create new processes to meet control objectives.
Applicants must be authorized to work in the US without requiring employer sponsorship currently or in the future. U.S. FinTech does not offer H-1B sponsorship for this position.
Successful job applicant will be required to successfully complete a background investigation, which may also include a credit check for positions in some areas of our business.

Nice To Haves

Experience with DR/BCP planning for IAM services desired.
CISSP, CISA, Microsoft, AWS certifications or equivalent designation desired.
Experience using IGA/IAM and PIM tools is a plus, including Thycotic Secret Server.
Experience with SIEM tools (Splunk, Rapid 7) is a plus.
Familiarity with Jira for project & time tracking is a plus.

Responsibilities

Support the Identity and Access Management program, both in the cloud and at remote locations by executing controls and leading efforts to improve them.
Ensure identity and access management controls are effective and identify improvements to reduce risks and increase efficiency.
Monitor, facilitate and operate all identity and access lifecycle management controls.
Manage, report and facilitate certification of access for all in-scope resources (including SaaS, AWS, Azure, US Fintech managed applications, tools and systems).
Operate directory-based provisioning system based on MS Active Directory Domain Services, Azure Active Directory and AWS IAM Services.
Manage end user accounts, user access groups and entitlements using applicable tools and applications.
Manage changes to accounts (user and system), user access groups and entitlements and ownerships based on requests.
Ensure privileged identity lifecycle management tools are properly used and processes are followed.
Continuously monitor all identity and access management controls for effective operation.
Provision user access to SaaS cloud-based services when required based on business needs.
Meet internal audit and third party assessment teams in order to respond to their requests to walk through control processes and to gather and present evidence of control operation.
Improve IAM operations efficiencies, accuracy and compliance by investigating and solving control issues with a focus on automation.
Participate in Cyber Security Incident Response Processes, incident investigations and audit reporting requests.
Support a 24/7 coverage schedule when needed as part of a rotation including weekends.
Assess and leads IAM readiness in the development and support of the Disaster Recovery Management Plan while participating and supporting Disaster Recovery exercises.
Develop, maintain, and enhance IAM strategies, policies, standards, and guidelines. With a customer-centric approach communicate broadly and consistently with stakeholders.