Identity & Access Management (IAM) Analyst

Leidos•Bethesda, MD

1d•$116,350 - $210,325

About The Position

Leidos has an exciting opportunity for an Identity & Access Management (IAM) Analyst is responsible for administering user identities and access privileges across enterprise systems and applications. This role ensures that users receive appropriate access based on business requirements while maintaining compliance with security policies, regulatory requirements, and the principles of least privilege. The analyst supports the full user account lifecycle, including onboarding, role changes, and offboarding, while safeguarding organizational information assets.

Requirements

BS degree and 12 – 15 years of prior relevant experience or Masters with 10 – 13 years of prior relevant experience.
May possess a Doctorate in technical domain.
TS/SCI w/Polygraph

Nice To Haves

Possesses and applies comprehensive knowledge across key tasks and high impact assignments.
Experience planning and leading major technology assignments.
Experience evaluating performance results and recommending major changes affecting short-term project growth and success.
Experience as a technical expert across multiple project assignments.
Experience with interacting with customers to handle service inquiries and problems.

Responsibilities

Provision, modify, suspend, and deprovision user accounts across enterprise systems and maintain user identities throughout the employment lifecycle.
Participate in periodic access certification and recertification activities.
Support internal and external audits by providing access documentation.
Review accounts for compliance with security and customer policies, and identify dormant, orphaned, or excessive privileged accounts.
Support Privileged Access Management (PAM) processes.
Monitor for unauthorized or inappropriate access.
Escalate potential security incidents involving user identities.
Maintain confidentiality of sensitive information and Personally Identifiable Information (PII).
Grants, modify, and revoke access to enterprise applications and systems.
Assigns security groups, roles, and permissions based on approved request.
Ensures access aligns with role-based access controls (RBAC) and least privilege principles.
Validate approvals before provision access.
Administer the appropriate applications ie. Microsoft Active Directory.
Maintain user attributes, organizational units, distribution lists, and security groups.
Troubleshoot identity synchronization and authentication issues.
Support Multi-Functional Authentication (MFA).
Resolve account lockouts and authentication failures.
Assist with password management in accordance with organizational policies.
Document provisioning activities with in the ITSM platform.
Maintain standard operating procedures, and work instructions.
Develop and update knowledge articles related to IAM processes.
Provide timely support for identity and access request.
Communicate request status to customers.
Meet established Service Level Agreements (SLAs).