Identity & Access Management Analyst

Central Hudson•Poughkeepsie, AR

1d•$73,000 - $171,300•Onsite

About The Position

We are seeking a diligent and experienced Identity and Access Management (IAM) Analyst to join our team. In this role, you will be working within a group of highly motivated Information Technology and Cybersecurity professionals committed to keeping Central Hudson safe. The IAM Analyst will be responsible for managing and securing user identities, access controls, and authentication and authorization systems across the organization’s IT and OT environments. This includes the administration and governance of identity lifecycle management, access provisioning, role-based access control, privileged access management, and ensuring compliance with security policies and regulatory requirements. The ideal candidate will have a strong understanding of IAM principles, directory services, SSO/MFA technologies, excellent analytical skills, and the ability to communicate effectively with internal stakeholders and vendors alike.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science or related field of study and IAM or related experience. In lieu of a bachelor’s degree, an associate degree in the aforementioned fields and 3+ years of IAM or related experience or a high school diploma or equivalency degree and 5+ years of IAM or related experience will be considered
Experience administering identity and access management solutions such as Azure Entra ID (Azure AD), Active Directory, or other IAM/IGA platforms
Understanding of IAM concepts including identity lifecycle management, RBAC, least privilege, SSO, MFA, and conditional access
Experience with user provisioning, de-provisioning, and access certification processes
Experience configuring and administering Windows Servers, Active Directory & Group Policy, Microsoft 365, Azure Entra ID, and Azure compute and networking resources
Experience with scripting for automation and analysis (e.g., PowerShell, Python, Bash)
Familiarity with authentication and federation protocols such as SAML, OAuth, OIDC, and SCIM
Familiarity with Microsoft Entra ID application integration, including Enterprise Applications and App Registration concepts, authentication flows, and API permissions
Understanding of privileged access management (PAM) principles and tools
Understanding of regulatory and compliance frameworks as they relate to access controls (e.g., SOX, NERC CIP, NIST)
Understanding of Operational Technology (OT) systems and their access management requirements
Effective communication skills, with the ability to collaborate with diverse teams and communicate complex concepts clearly and concisely
Excellent analytical, decision-making, multitasking, and organizational skills
Ability to work with limited direct supervision and professionally respond to constructive feedback
Ability to be available for on-call and after-hour access-related incidents
Valid driver’s license

Nice To Haves

5+ years of experience in identity and access management or a closely related cybersecurity discipline
Experience with Identity Governance and Administration (IGA) platforms such as SailPoint, Saviynt, or Microsoft Identity Governance
Experience in Security and/or Regulatory Frameworks such as NIST, CIS Benchmarks, SOX, NERC CIP, etc.
Experience in Energy & Utilities or services industry
Experience implementing or managing PAM solutions such as CyberArk, BeyondTrust, or Delinea
Experience with data visualization tools and building IAM operational dashboards
Experience developing IAM automation workflows and integrations
Relevant certifications such as Certified Identity and Access Manager (CIAM), Certified Information Systems Security Professional (CISSP), CompTIA Security+, Microsoft Certified: Identity and Access Administrator Associate (SC-300), SailPoint Certified IdentityNow Engineer

Responsibilities

Administers and maintains identity and access management platforms, including Azure Entra ID (Azure AD), Active Directory, SailPoint and related IAM solutions to ensure secure and efficient access across the organization
Design, create, and manage Microsoft Entra ID (Azure AD) Enterprise Applications and App Registrations, including configuration of authentication methods (OAuth2/OIDC/SAML), API permissions, secrets/certificates, and lifecycle governance aligned with enterprise security standards
Manages the full identity lifecycle including provisioning, de-provisioning, transfers, and role changes for employees, contractors, and service accounts
Implements and maintains role-based access control (RBAC) models, ensuring access rights are aligned with job functions and the principle of least privilege
Administers and supports multi-factor authentication (MFA), single sign-on (SSO), and conditional access policies to strengthen authentication controls
Manages and monitors privileged access management (PAM) solutions to secure elevated accounts and reduce risk of credential-based attacks
Conducts regular user access reviews and certification campaigns to validate access appropriateness and ensure compliance with internal policies and regulatory requirements (e.g., SOX, NERC CIP)
Investigates and resolves access-related incidents, including unauthorized access attempts, account lockouts, and permission escalation issues
Develops and maintains IAM policies, procedures, and standard operating documentation
Partners with HR, IT, and business units to ensure timely and accurate access provisioning aligned with onboarding, offboarding, and role change processes
Supports the integration of applications and systems with centralized IAM platforms, including SAML, OAuth, OIDC, and SCIM-based integrations
Monitors IAM systems for anomalies, misconfigurations, and potential security risks; escalates findings and recommends remediation actions
Generates reports and dashboards on IAM metrics, including access review completion rates, provisioning SLAs, and policy compliance
Automates IAM workflows and processes using scripting and orchestration tools to improve efficiency and reduce manual effort
Stays updated with the latest IAM trends, threats, and technologies, and applies this knowledge to strengthen the organization’s identity security posture
Supports audit and compliance activities by providing evidence of access controls, policy enforcement, and identity governance
Promotes and raises awareness by educating others about the importance of identity security and access hygiene best practices
Supports project planning and execution for IAM-related initiatives, including tracking timelines and resource needs
Participates in on-call rotation as needed to respond to access-related incidents outside of regular working hours
Provides storm/emergency response support