Sr. Identity and Access Management Analyst

Justworks•New York, NY

About The Position

At Justworks, you’ll enjoy a welcoming and casual environment, great benefits, wellness program offerings, company retreats, and the ability to interact with and learn from leaders in the startup community. We work hard and care about our most prized asset - our people. We’re helping businesses get off the ground by enabling them to focus on running their business. We solve HR issues. We’re data-driven and never stop iterating. If you’d like to work in a supportive, entrepreneurial environment, are interested in building something meaningful and having fun while doing it, we’d love to hear from you. We're united by shared goals and shared motivations at Justworks. These are best summed up in our company values, which are reflected in our product and in our team. Our Values If this sounds like you, you’ll fit right in. Who You Are Justworks is looking for an experienced Identity and Access Management (IAM) analyst who can help enhance Justworks’s IAM program and maturity. As a successful candidate, you have demonstrated experience working with business to define and implement roles, rules, permissions and accesses, and working with IAM engineers to build adequate security solutions to improve identity and access management. You have a deep understanding of the fundamentals of identity and access management concepts and risks, and have worked with multiple IAM tools such as IGA, PAM, SSO and others. You also should have experience on AWS and its IAM roles. Your Success Profile How You Will Do Your Work As a Senior IAM Analyst, how results are achieved is paramount for your success and ultimately result in our success as an organization. In this role, your foundational knowledge, skills, abilities and personal attributes are anchored in the following: Good judgement - the exercise of critical thinking, analyzing and assessing problems and implications, identifying patterns, making connections of underlying issues, understanding risks and developing mitigation strategies, and taking ownership of the outcome. Resourcefulness - taking a can-do approach, even in the face of obstacles and constraints by assessing what’s in front of you and effectively and efficiently optimizing what you have, whether it's working on something new or thinking about how to do something better. Teamwork and communication - putting our collective best together through documentation, collaboration, relationship-building, listening, empathy, recruiting, and evangelism. Influence and leadership - fostering a community of knowledge-sharing, collaboration, mentorship, and forward-thinking. Skills and knowledge - the capacity to actively learn and apply specific domain knowledge, know-how, and best practices to continually enhance and improve. In addition, all Justworkers focus on aligning their behaviors to our core values known as COGIS. It stands for: Camaraderie - Day to day you can be seen working together toward a higher purpose. You like to have fun. You’re an active listener, treat people respectfully, and have a strong desire to know and help others. Openness - Your default is to be open. You're willing to share information, understand other perspectives, and consider new possibilities. You’re curious, ask open questions, and are receptive to thoughts and feedback from others. Grit - You demonstrate grit by having the courage to commit and persevere. You’re committed, earnest, and dive in to get the job done well with a positive attitude. Integrity - Simply put, do what you say and say what you'll do. You’re honest and forthright, have a strong moral compass, and strive to match your words with your actions while leading by example. Simplicity - Be like Einstein: “Everything should be made as simple as possible, but no simpler.”

Requirements

5+ years of hands-on experience in identity and access management, preferably in technology companies or enterprise environments
3+ years of experience with RBAC design, implementation, and management
Extensive experience in the framework and process to define roles and permissions in IGA or RBAC implementations
Proven experience working with business stakeholders to gather requirements and translate them into access control specifications
Solid experience with IAM tools and platforms (e.g., AD, Okta, SailPoint, ForgeRock, CyberArk, or similar)
Demonstrated experience conducting access reviews, certifications, and compliance audits
Strong understanding of identity and access management concepts, protocols, and standards (SAML, OAuth, OpenID Connect, LDAP)
Proficiency with directory services and identity providers
Knowledge of privileged access management (PAM) concepts and tools
Understanding of segregation of duties (SoD) principles and risk-based access controls
Familiarity with compliance frameworks (SOX, PCI-DSS, HIPAA, etc.)
Exceptional written and verbal communication skills with ability to explain technical concepts to non-technical stakeholders
Proven ability to work collaboratively across diverse teams and organizational levels
Experience facilitating meetings, workshops, and training sessions
Strong customer service orientation and stakeholder management skills
Strong analytical and organizational skills

Nice To Haves

Bachelor's degree in Information Technology, Computer Science, or related field
Industry certifications such as CISSP, CISA, CISM, or vendor-specific IAM certifications
Experience with cloud IAM platforms (AWS IAM, Azure AD, Google Cloud IAM)
Knowledge of zero trust architecture and modern identity security concepts
Experience with automated provisioning and deprovisioning workflows
Familiarity with IT service management (ITSM) tools and processes

Responsibilities

Partner with business stakeholders to analyze and define role-based access control (RBAC) requirements and permission models
Conduct access reviews and collaborate with business units to establish appropriate access levels and segregation of duties
Translate business requirements into technical IAM specifications and access policies
Facilitate workshops and requirements gathering sessions with cross-functional teams
Support IAM leadership and engineers to execute IAM roadmaps.
Design and document access control matrices, role hierarchies, and permission structures
Assist in the deployment and configuration of identity management solutions across enterprise systems
Coordinate with technical teams to ensure proper integration of IAM systems with business applications
Continuously evaluate and improve IAM processes, workflows, and user experiences
Create and maintain comprehensive documentation for IAM processes, procedures, and system configurations
Develop training materials and provide guidance to end users and business stakeholders
Analyze access patterns and recommend optimization opportunities
Help developing, maintaining, and enforcing IAM policies, standards, and procedures.
Assess and document access-related risks and recommend appropriate mitigation strategies
Investigate and resolve access-related security incidents and policy violations
Support privilege access management (PAM) initiatives and monitor high-privilege account usage
Help Cyber Defense Operations triage incidents as need especially related to IAM
Work with Internal Audit, IT, and Digital Security to address access review gaps and ensure compliance with security policies and regulatory requirements.
Perform other related duties as assigned.