Identity & Access Management Analyst (IAM), Progression

TECO Energy•Lutz, FL

2d•Hybrid

About The Position

The Identity & Access Management Analyst role is part of a progression-based job family at Tampa Electric. The position may be hired at a level determined by education and years of experience. Its primary purpose is to protect the integrity of company information assets by establishing, maintaining, reviewing, and removing user, system, functional, and shared accounts across IT systems. The role safeguards access from accidental or unauthorized modification, destruction, or disclosure, and helps secure critical cyber assets while supporting regulatory requirements including SOX, FERC, NERC, PCI, and HIPAA. Responsibilities across the progression include responding to access-related incidents; provisioning and deprovisioning accounts; reviewing access controls across enterprise systems; enforcing corporate security policies and regulatory requirements; investigating access exceptions; maintaining process documentation; and improving or automating security processes. At higher levels, the analyst may troubleshoot complex issues, document business and functional security roles and access requirements, coordinate project security tasks, mentor analysts, and, in the separate lead role, manage staff and lead projects. The position works with Service Desk, Enterprise Security, and Cyber Security Operations Center team members, as well as management and associates across TECO Emera and its affiliates. Some extended working hours are required, and the work takes place in a fast-paced environment. The listed schedule is Monday through Friday, with four days in the office and one remote day.

Requirements

High school diploma or equivalent.
For Level 1: at least two years of information technology, information security, or information systems audit experience; a bachelor's degree may substitute for one year of experience.
For Level 2: at least four years of direct experience performing the position's duties and responsibilities; a bachelor's degree may substitute for up to two years of experience.
For Level 3: at least eight years of direct experience performing the position's duties and responsibilities; a bachelor's degree may substitute for up to four years of experience.
For the separate lead role: at least 12 years of progressive experience performing the position's duties and responsibilities; a bachelor's degree may substitute for up to four years of experience.
Basic Windows operating system and account management knowledge for Level 1; progressively thorough and strong knowledge of Windows and user account management at higher analyst levels.
Ability to support security access requests, with preference for SAP, SQL Database, and Windows experience.
Practical understanding of security access management and exceptional attention to detail.
At higher analyst levels, skills in documenting security roles and access requirements, analyzing and troubleshooting issues, and understanding compliance processes for NERC CIP, SOX, and PCI.
Strong verbal, written, analytical, and interpersonal skills for the senior analyst level.
For the lead role, leadership, analytical, risk assessment, listening, and written communication skills, and ability to present information to management, teams, and departments.

Nice To Haves

Bachelor's degree in Information Systems, Computer Science, Business, or a related field.
SSCP, CISSP, Security+, or ITIL certification; for the lead role, Security+, SANS GIAC, CISM, CISA, CISSP, or ITIL certification.
Knowledge of identity governance tools, privilege management tools, and multi-factor authentication tools.
Knowledge of Azure AD groups and role-based access controls (RBAC).

Responsibilities

Respond to business partner incidents and troubleshoot security access administration issues.
Provision and deprovision account types and review security access controls across enterprise systems, ensuring approved access to cyber assets and network resources is segregated according to regulatory and business requirements.
Maintain and enforce regulatory compliance and corporate IT security standards, including PCI, FERC, HIPAA, SOX, and NERC requirements.
Investigate security access exceptions and update security process documentation.
Analyze and troubleshoot complex security access issues; proactively update procedures and processes and suggest or implement improvements.
Identify security access exceptions and opportunities for process improvement and automation.
Gather and document business and functional security roles and access requirements.
Coordinate and address project-related security tasks.
At the separate lead level, lead project teams, serve as a technical subject matter expert, mentor and direct analysts, manage performance reviews, develop team practices, and oversee projects or functional segments.