Identity & Access Management Analyst

Trupanion • Seattle, WA

1d • Hybrid

About The Position

The Identity & Access Management (IAM) Analyst supports secure, accurate, and timely access across Trupanion’s workforce and enterprise applications. This hands-on role manages identity lifecycle and access governance activities, helps maintain IAM controls, and improves processes through troubleshooting, documentation, and automation. The role is open to candidates in the Seattle, Washington area and follows a hybrid remote/in-office schedule, with at least three days per week in the company’s casual, pet-friendly office.

Requirements

• At least 2 years of hands-on experience in Identity & Access Management, identity administration, security administration, or a closely related technical function.
• Bachelor’s degree in information technology, cybersecurity, computer science, or a related field, or equivalent practical experience.
• Experience administering identities, accounts, groups, roles, entitlements, and access in Microsoft Entra ID and Active Directory.
• Experience supporting Joiner, Mover, and Leaver processes, including provisioning, access changes, deprovisioning, and timely removal of access.
• Experience with Single Sign-On and authentication technologies, including SAML, OAuth, OpenID Connect, Multi-Factor Authentication, or Conditional Access.
• Experience using an Identity Governance and Administration or access management platform to support access requests, approvals, provisioning, certifications, and deprovisioning.
• Experience supporting user access reviews, audit evidence, and access governance controls in a regulated or controlled environment.
• Working knowledge of least privilege, Role-Based Access Control, separation of duties, and privileged access principles.
• Ability to troubleshoot identity and access issues, document technical processes, and maintain accurate operational records.
• Clear written and verbal communication skills and ability to work effectively with technical teams, application owners, and business partners.

Nice To Haves

• Relevant certification or active study toward one, such as Microsoft Certified: Identity and Access Administrator Associate (SC-300), CyberArk Defender or Sentry, or an ISACA security, risk, governance, or audit credential.
• Experience with Microsoft 365 administration, CyberArk, Lumos, or another PAM or identity governance platform.
• Experience with PowerShell, APIs, SQL, or other IT automation and systems integration.
• Knowledge of SOX controls, audit support, evidence management, or access governance in a regulated environment.
• Experience designing or maintaining RBAC models, access policies, or application onboarding standards.
• Strong analytical and problem-solving skills, with a focus on identifying root causes and improving processes.
• Ability to manage competing priorities, take ownership of work, and collaborate across technical and business teams.

Responsibilities

• Administer user identities, accounts, roles, groups, and entitlements across enterprise applications and infrastructure.
• Support Joiner, Mover, and Leaver processes to ensure access is provisioned, changed, and removed accurately and on time.
• Perform user access, entitlement, and role reviews, as well as access certifications; coordinate remediation of inappropriate, excessive, or outdated access.
• Support Role-Based Access Control and translate business access requirements into sustainable roles and access policies.
• Administer identity services in Microsoft Entra ID and Active Directory, including users, groups, enterprise applications, authentication, and identity lifecycle processes.
• Support Privileged Access Management processes and technologies, including CyberArk.
• Use identity governance and automation platforms, including Lumos, to improve access requests, approvals, provisioning, reviews, and deprovisioning.
• Investigate identity, authentication, and access issues, identify root causes, and provide clear technical guidance to employees and partner teams.
• Automate repetitive IAM activities and assist with onboarding applications into identity governance and access management processes.
• Maintain audit-ready IAM documentation, controls, and evidence.
• Collaborate with IT, Information Security, People Operations, application owners, and business teams.

Benefits

• Monthly bonuses.
• Restricted Stock Units for all new team members, with new-hire grants vesting over four years.
• Full medical, dental, and vision benefits at no cost to the employee.
• Four weeks of paid time off.
• Nine paid float holidays.
• Five-week sabbatical after five years of employment.
• Free medical health insurance for one dog or cat.
• Paid time off to volunteer at nonprofit organizations.
• Free on-site gym.
• Free dog-walking services for office pets during business hours.
• Free parking.
• Paid ORCA cards.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level