Information Security Analyst - Security Identity

Williams-Sonoma•Rocklin, CA
•$75,000 - $90,000•Onsite

About The Position

The Information Security Analyst – Identity & Access Management supports the daily operation of enterprise identity services, including access provisioning, identity lifecycle activities, authentication support, privileged access requests, and identity governance. This hands-on operational role partners with IAM Engineering and business stakeholders to resolve access issues, maintain accurate access records, support SOX and PCI DSS controls, and improve repeatable processes. The position primarily supports business-hours operations with occasional escalations and requires onsite work in the Rocklin, California office Monday through Thursday. The role is part of the Identity and Access Management function within the Cyber Security organization. The team secures identities, manages access to critical systems, and supports strong authentication and authorization controls across the enterprise as part of the WSI Security Governance program.

Requirements

  • 1–2 years of experience in information security, identity and access management, IT service operations, or a related technical field.
  • Bachelor’s degree in a related field or equivalent work experience.
  • Working understanding of identity lifecycle management, access provisioning, least privilege, and role-based access controls.
  • Experience investigating user access issues, managing service requests, and following approval and change-control procedures.
  • Familiarity with Active Directory, Microsoft Entra ID, or comparable directory and identity services.
  • Foundational understanding of SSO, MFA, privileged access, and security controls related to access management.
  • Ability to document work accurately, manage competing priorities, protect sensitive information, and collaborate across technical and business teams.
  • Strong communication, analytical, customer service, and troubleshooting skills.
  • Must work onsite in the Rocklin, CA office Monday through Thursday.

Nice To Haves

  • Operational experience with Ping Identity, SailPoint IdentityIQ, Delinea PAM, Microsoft Entra ID, Active Directory, or Clutch Security.
  • Experience supporting access certifications, identity governance, service account controls, and non-human identity oversight.
  • Familiarity with SOX and PCI DSS access-control requirements and audit evidence collection.
  • Basic PowerShell or Python scripting experience, or participation in IAM workflow automation and process improvements.
  • Experience supporting IAM in a large enterprise or hybrid on-premises and cloud environment.

Responsibilities

  • Process Joiner/Mover/Leaver activities, including timely provisioning, modification, and deprovisioning of user access in accordance with approved requests and established controls.
  • Validate access requests, required approvals, role assignments, and least-privilege requirements; coordinate with application owners and IT teams to resolve exceptions.
  • Support access reviews, periodic certifications, entitlement validation, and remediation of inappropriate or outdated access.
  • Provide operational support for single sign-on (SSO), multi-factor authentication (MFA), and user authentication issues using Ping Identity, Microsoft Entra ID, and Active Directory.
  • Process privileged access requests and support approved workflows and access controls in Delinea Privileged Access Management (PAM).
  • Assist with service account and non-human identity inventory, ownership validation, access reviews, and lifecycle governance, including Clutch Security workflows.
  • Investigate IAM service tickets and access-related incidents; document troubleshooting, identify root causes where possible, and escalate complex platform issues to IAM Engineering or Security Operations.
  • Support SailPoint IdentityIQ identity governance workflows, including provisioning activities, access certifications, and reconciliation follow-up.
  • Collect, validate, and organize evidence for SOX and PCI DSS audits; help address control exceptions and access-related findings.
  • Identify opportunities to simplify manual work, improve operational procedures, and assist with basic scripting or workflow automation under engineering guidance.
  • Maintain accurate ticket notes, standard operating procedures, and knowledge articles; collaborate with HR, IT Service Desk, Infrastructure, application owners, Security Operations, and Audit/Compliance teams.

Benefits

  • A generous discount on all WSI brands.
  • A 401(k) plan and other investment opportunities.
  • Paid vacations, holidays, and time off to volunteer.
  • Health benefits, dental and vision insurance, including same-sex domestic partner benefits.
  • Tax-free commuter benefits.
  • A wellness program that supports physical, financial, and emotional health.
  • In-person and online learning opportunities through WSI University.
  • Cross-brand and cross-function career opportunities.
  • Resources for self-development.
  • Advisor (Mentor) program.
  • Career development workshops, learning programs, and speaker series.
  • Compensation may include benefits, paid time off, merit, and bonus opportunities.
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service