Identity & Access Management Analyst

Trupanion • Seattle, WA

1d • $33 - $35 • Hybrid

About The Position

The Identity & Access Management (IAM) Analyst supports secure, accurate, and timely access across Trupanion’s workforce and enterprise applications. This hands-on role manages identity lifecycle and access governance activities, helps maintain IAM controls, and improves processes through troubleshooting, documentation, and automation.

The position is open to candidates in the Seattle, Washington area and follows a hybrid remote/in-office schedule, with at least three days per week at Trupanion’s casual, pet-friendly office. The role is full-time and pays $33–$35 per hour. Employees are currently eligible for monthly bonuses, and new team members receive Restricted Stock Units that vest over four years.

Requirements

• At least 2 years of hands-on experience in Identity & Access Management, identity administration, security administration, or a closely related technical function.
• Bachelor’s degree in information technology, cybersecurity, computer science, or a related field, or equivalent practical experience.
• Experience administering identities, accounts, groups, roles, entitlements, and access in Microsoft Entra ID and Active Directory.
• Experience supporting Joiner, Mover, and Leaver processes, including provisioning, access changes, deprovisioning, and timely removal of access.
• Experience with Single Sign-On and authentication technologies, including SAML, OAuth, OpenID Connect, Multi-Factor Authentication, or Conditional Access.
• Experience using an Identity Governance and Administration or access management platform to support access requests, approvals, provisioning, certifications, and deprovisioning.
• Experience supporting user access reviews, audit evidence, and access governance controls in a regulated or controlled environment.
• Working knowledge of least privilege, Role-Based Access Control, separation of duties, and privileged access principles.
• Ability to troubleshoot identity and access issues, document technical processes, and maintain accurate operational records.
• Clear written and verbal communication skills, with the ability to work effectively with technical teams, application owners, and business partners.
• Applicants must be authorized to work for any employer in the U.S.; Trupanion is unable to sponsor or take over sponsorship of an employment visa.

Nice To Haves

• Relevant certification or active study toward one, such as Microsoft Certified: Identity and Access Administrator Associate (SC-300), CyberArk Defender or Sentry, or an ISACA security, risk, governance, or audit credential.
• Experience with Microsoft 365 administration, CyberArk, Lumos, or another PAM or identity governance platform.
• Experience with PowerShell, APIs, SQL, or other forms of IT automation and systems integration.
• Knowledge of SOX controls, audit support, evidence management, or access governance in a regulated environment.
• Experience designing or maintaining RBAC models, access policies, or application onboarding standards.
• Strong analytical and problem-solving skills, with a focus on identifying root causes and improving processes.
• Ability to manage competing priorities, take ownership of work, and collaborate across technical and business teams.

Responsibilities

• Administer user identities, accounts, roles, groups, and entitlements across enterprise applications and infrastructure.
• Support Joiner, Mover, and Leaver processes to ensure access is provisioned, changed, and removed accurately and on time.
• Perform user access reviews, entitlement reviews, role reviews, and access certifications, and coordinate remediation of inappropriate, excessive, or outdated access.
• Support Role-Based Access Control and translate business access requirements into sustainable roles and access policies.
• Administer identity services in Microsoft Entra ID and Active Directory, including users, groups, enterprise applications, authentication, and identity lifecycle processes.
• Support Privileged Access Management processes and technologies, including CyberArk.
• Use identity governance and automation platforms, including Lumos, to improve access requests, approvals, provisioning, reviews, and deprovisioning.
• Investigate identity, authentication, and access issues; identify root causes; and provide clear technical guidance to employees and partner teams.
• Automate repetitive IAM activities and assist with onboarding applications into identity governance and access management processes.
• Maintain audit-ready IAM documentation, controls, and evidence, and collaborate with IT, Information Security, People Operations, application owners, and business teams.

Benefits

• Full medical, dental, and vision benefits at no cost to the employee.
• Four weeks of paid time off and 9 paid float holidays.
• Five-week sabbatical after five years of employment.
• Free medical health insurance for one dog or cat.
• Paid time off to volunteer at nonprofit organizations.
• Free on-site gym, free dog walking services for office pets during business hours, free parking, and paid ORCA cards at the Seattle office.
• Monthly bonuses (employees are currently eligible).
• Restricted Stock Units granted to all new team members, vesting over four years.
• Casual, pet-friendly office environment.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level