Identity & Access Management (IAM) Analyst

American Red Cross • Washington, DC

22h • $95,000 - $110,000 • Remote

About The Position

We are actively seeking an experienced Identity & Access Management (IAM) Analyst to join our Information Security team. In this role, you will be responsible for the design, implementation, administration, and continuous improvement of our identity governance and privileged access management programs. You will collaborate closely with technical and business stakeholders to support identity lifecycle management, access governance, privileged account security, and compliance requirements across our on-premises and cloud-based environments.

The ideal candidate will have hands-on experience with SailPoint and CyberArk platforms, possess a strong understanding of identity governance and administration (IGA), and be skilled at evaluating risks associated with access management solutions to ensure alignment with business objectives, security policies, and regulatory requirements.

The work location for this position is 100% virtual/work from home. The position can be worked from anywhere in the United States with core hours starting by 10am EST for a West coast work location.
This position will also be a part of on call rotation for a week at a time every 2 to 3 months managing tickets/emergencies. Need to have ability to travel to on-site meetings ~2x/year.

Requirements

• Bachelor's degree in Computer Science, Computer Engineering, or related discipline required.
• Minimum 4 years of related experience or equivalent combination of education and related experience required.
• Minimum of 3 years of IT experience, preferably in Identity Governance, Privileged Access Management, or Information Security.
• Experience with enterprise Identity Governance and Administration (IGA) and Privileged Access Management (PAM) solutions, including: SailPoint IdentityNow, CyberArk Privileged Access Management.
• Experience with equivalent IAM/PAM technologies is also acceptable.
• Hands-on implementation, configuration, administration, and operational support of SailPoint and CyberArk platforms.
• Experience designing and supporting identity lifecycle management, access certifications, role management, and governance processes.
• Strong knowledge of privileged account security, credential vaulting, session management, and least-privilege principles.
• Strong Microsoft Active Directory and Azure Active Directory experience.
• Working knowledge of Windows Server environments.
• Familiarity with LDAP, SCIM, REST APIs, and enterprise application integrations.
• Experience integrating identity governance platforms with cloud and on-premises applications.
• General scripting and automation experience, including PowerShell, SQL, JavaScript, or similar technologies.
• Experience with workflow development and access governance automation.
• Experience participating in IAM/PAM product evaluation, implementation, and enhancement projects.
• Effective written and verbal communication skills required.
• Strong analytical and problem-solving abilities.
• Must be a strong team player with a willingness to share information and mentor junior team members.
• Must be highly organized and capable of prioritizing multiple assignments.
• Experience developing and presenting technical and business solution recommendations.
• Occasional after-hours work and participation in on-call rotations may be required.
• Travel: 2x year at minimum

Nice To Haves

• Project management experience
• AWS Identity and Access Management (IAM) experience
• Azure AD / Entra ID roles, permissions, and governance experience
• Relevant certifications such as SailPoint Certified, CyberArk, CISSP, or Security+
• Passion, energy, and commitment to the humanitarian mission of the Red Cross

Responsibilities

• Administer and support identity lifecycle management processes, including joiner, mover, and leaver workflows.
• Manage account provisioning, deprovisioning, access requests, role-based access controls, and entitlement management.
• Configure, implement, and maintain SailPoint identity governance solutions.
• Administer and support CyberArk Privileged Access Management (PAM) solutions, including privileged account onboarding, credential management, and session monitoring.
• Conduct access certifications, entitlement reviews, and remediation activities.
• Design and maintain automated provisioning workflows and governance processes.
• Provide technical support and troubleshooting for IAM and PAM platforms.
• Install, configure, and upgrade IAM and PAM software releases and system enhancements.
• Evaluate, test, and implement patches while resolving software-related issues.
• Integrate applications and systems with SailPoint and CyberArk platforms.
• Support integrations with Active Directory, Azure Active Directory, LDAP directories, cloud applications, and enterprise systems.
• Collaborate with application owners, infrastructure teams, and business stakeholders to implement secure access controls.
• Participate in IAM and PAM solution design, architecture reviews, and risk assessments.
• Ensure compliance with internal security standards, audit requirements, and regulatory frameworks.
• Follow established SDLC and change management processes for IAM related initiatives.

Benefits

• Medical, Dental Vision plans
• Health Spending Accounts & Flexible Spending Accounts
• PTO: Starting at 19 days a year; based on type of job and tenure
• Holidays: 11 paid holidays comprised of six core holidays and five floating holidays
• 401K with up to 6% match
• Paid Family Leave
• Employee Assistance
• Disability and Insurance: Short + Long Term
• Service Awards and recognition

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level