Senior Identity and Access Management Analyst

Black & Veatch Family of Companies•Cary, NC

5d•Hybrid

About The Position

We are seeking a highly skilled Senior Identity Governance & Administration (IGA) Analyst to lead the administration, design, and expansion of our enterprise Identity Governance program utilizing a platform integrated with a new Oracle HCM as the authoritative source of identity data. This role will be responsible for establishing and maturing the organization's identity governance capabilities, including onboarding enterprise applications, developing a comprehensive persona and role framework, defining birthright access models, implementing automated joiner-mover-leaver (JML) processes, and ensuring compliance with multiple regulatory and contractual requirements. The successful candidate will serve as a strategic technical leader, partnering with Cybersecurity, HR, IT, Audit, Compliance, and business stakeholders to deliver scalable identity governance solutions that reduce risk while improving operational efficiency.

Requirements

Bachelor's degree in Information Security or Computer Science or related field.
Minimum 10 years of overall experience in Cyber Security, IT, Risk Assessments, Privacy
Of the 10 years overall experience required, must have 5 years of experience in Governance, Risk and Compliance; and Privacy.
At least 1 certification such as CISSP, CISM, CISA, CRISC, CIPP or similar privacy certifications.
Demonstrated experience applying security and risk frameworks, regulations and privacy such as NIST CSF/800-53/800-171, NERC CIP, CIS, CMMC, SOC2, GDPR, etc.
Experience in developing security policies and standards, risk assessments, third party risk programs, risk management, risk registries, regulatory compliance, security awareness training and testing, security metrics, privacy, and other relevant GRC areas.
All applicants must be able to complete pre-employment onboarding requirements (if selected) which may include any/all of the following: criminal/civil background check, drug screen, and motor vehicle records search, in compliance with any applicable laws and regulations.

Nice To Haves

5+ years of Identity and Access Management (IAM) experience.
3+ years of hands-on SailPoint administration and implementation experience.
Experience integrating IGA platforms with Oracle HCM or similar HR systems.
Experience onboarding enterprise applications into an identity governance platform.
Experience designing role-based access control (RBAC) and persona frameworks.
Experience supporting regulated environments and audit requirements.

Responsibilities

Serve as the primary administrator and subject matter expert for the SailPoint IGA platform.
Design, implement, and maintain enterprise identity governance processes and controls.
Develop and execute the roadmap for the organization's identity governance maturity program.
Establish governance standards, policies, and operational procedures for identity lifecycle management.
Provide technical leadership and guidance for IAM and cybersecurity initiatives.
Configure, administer, and optimize SailPoint.
Manage identity lifecycle workflows, certifications, provisioning, access requests, and policy enforcement.
Develop and maintain connectors, integrations, transforms, rules, workflows, and governance processes.
Monitor platform health, performance, and operational effectiveness.
Support platform upgrades, enhancements, and new feature adoption.
Maintain integration between Oracle HCM and SailPoint to ensure accurate identity creation, modification, and termination activities.
Design and implement automated Joiner, Mover, and Leaver (JML) processes.
Ensure workforce changes are accurately reflected across connected systems.
Develop identity data governance standards to improve data quality and consistency.
Lead onboarding of enterprise applications into the SailPoint platform.
Work with application owners to define provisioning models, entitlement structures, and governance processes.
Design integration patterns utilizing APIs, SCIM, JDBC, LDAP, Active Directory, Azure AD, and other identity technologies.
Validate application access models and ensure appropriate governance controls are established.
Create and maintain onboarding documentation, support procedures, and operational runbooks.
Design and implement an enterprise persona-based access framework.
Develop business roles, IT roles, and access profiles aligned to organizational functions.
Establish role mining and role engineering practices.
Partner with HR and business leaders to map job functions to required system access.
Continuously refine personas and role models to support least privilege and operational efficiency.
Support regulatory, audit, and governance activities related to identity management.
Participate in internal and external audits and remediation efforts.
Produce compliance reporting and evidence supporting access governance controls.
Collaborate with HR, IT Operations, Cybersecurity, Enterprise Applications, Compliance, and business stakeholders.
Facilitate workshops to define identity governance requirements.
Provide executive-ready reporting, metrics, and governance updates.