Identity and Access Management Analyst

Federal Home Loan Bank•Irving, TX

2d•Onsite

About The Position

This is a hands-on identity governance role focused on secure, compliant access for employees and Bank members. You’ll own the day-to-day identity lifecycle, access request workflows, and Bank-wide access reviews. You will also participate within an On-Call rotation in support of IT Security Incident Management, gaining knowledge and proficiency within the Microsoft Defender suite of tools, SIEM/SOAR (alert handling & automation), threat containment procedures, and audit‑ready evidence handling.

Requirements

Bachelor’s degree in computer science, IT Administration, Information Systems or related field. (In lieu of degree, 3+ years of experience required).
Knowledge of application security processes and procedures.
Knowledge of Identity and Access concepts and technologies to secure production and corporate access, such as: Azure Active Directory (Microsoft Entra ID), SSO, etc.
Ability to understand and learn automation technologies and build applicable automations.
Experience and/or conceptual knowledge with a broad array of security technologies, such as firewalls, SIEM/SOAR, endpoint security, and vulnerability management solutions (Qualys, Tenable).
Possesses understanding of concepts and knowledge in various information security areas, such as: Identity and Access Management, Security technology, Role-based Access Controls, Information Risk and Governance.
Ability to manage multiple complex challenges in parallel, and solve them with cost effective, highly automated, efficient, and proven security technologies or controls.
Highly detail oriented and driven to take initiative.
Must possess excellent communications and interpersonal skills and be able to effectively work with all levels of Bank management as well as external customers.
Hands-on understanding and familiarity of Cloud security principles and technology.

Nice To Haves

Applicable Information Assurance/Security certifications preferred.
Experience in highly regulated environments including financial services or banking industry is preferred.
One or more Azure Certifications preferred.

Responsibilities

Execute and continuously improve onboarding, role changes, and offboarding for internal users and ensuring right-first-time provisioning, timely revocation, and a clean audit trail.
Integrate HR signals and directory attributes to drive role-based access (RBAC) updates automatically; remove obsolete entitlements when a user moves.
Build and administer Access Packages (catalogs, resource roles, request/approval policies, expiration, etc.) within Azure and other applicable solutions.
Govern lifecycle with automated assignment, review, and expiry to prevent stale access while reducing manual tickets.
Operate Privileged Identity Management (PIM) solutions. Manage role-eligibility, MFA requirements, approvals at activation, time-bound elevation, and recurring reviews to minimize standing privileged access.
Process daily member access requests and translate verified instructions into application entitlements across Bank systems.
Troubleshoot access/system issues and effectively collaborate with other Bank departments and personnel.
Maintain traceable records of approvals/changes to support regulatory and audit requirements.
Operate enterprise IAM platforms (e.g., Microsoft Entra ID, ADDS, and other internally-built solutions) to grant, modify, and revoke access; enforce SSO, MFA, RBAC, and Segregation of Duties policies across directories and apps.
Standardize request/approval workflows, entitlement catalogs, and role definitions with clear SOPs.
Perform User-Acceptance-Testing (UAT) within applications in support of deployments.
Manage keys and secrets in support of business applications.
Plan, schedule, and run Access Reviews for groups, applications, and privileged roles; capture reviewer decisions and automate removals of unneeded access.
Prepare audit evidence (reports, logs, approval histories, exceptions) to satisfy control tests and exam procedures.
Participate in On-Call rotation for all IT Security related incidents; investigate, contain, and restore securely while documenting post-incident findings.
Partner with Security Operations to correlate signals and tighten controls after lessons learned.
Align identity controls to banking authentication/access guidance; maintain consistent processes that produce audit-ready artifacts.
Track identity KPIs (time-to-provision, stale-access reduction, review completion rates) and prepare metrics/dashboards when applicable.