job summary:
Business Analyst - Active Directory & PowerShell
Position Summary
The Business Analyst - Active Directory & PowerShell serves as a liaison between business stakeholders, Information Security, IAM engineering, application owners, and IT support teams.
This role analyzes identity and access management processes, with a strong focus on Microsoft Active Directory, group and access analysis, role-based access concepts, and user lifecycle controls. The position combines business analysis responsibilities with hands-on technical analysis using PowerShell, Active Directory reporting tools, and structured data.
The analyst will identify access patterns, conduct stakeholder interviews, document business and application context, and make recommendations for group cleanup, entitlement rationalization, and access-package development.
This is primarily an analysis and recommendation role. Implementation and remediation activities will be performed by the appropriate technical and operational teams.
location: ,
job type: Contract
salary: $55 - 75 per hour
work hours: 9am to 5pm
education: Bachelors
responsibilities:
Business and Process Analysis
- Partner with IAM, Information Security, Infrastructure, application owners, IT support teams, and business stakeholders to understand Active Directory groups and access requirements.
- Conduct stakeholder interviews and working sessions to document how access is used across applications, teams, and business functions.
- Translate technical analysis into clear recommendations for both technical and nontechnical stakeholders.
Active Directory and Access Analysis- Extract and analyze Active Directory users, groups, memberships, nested groups, attributes, ownership, and access relationships.
- Identify group relationships and access patterns that can support role-based access and access-package design.
- Identify and recommend remediation for stale, duplicate, unmanaged, poorly owned, or inconsistently assigned groups.
PowerShell and Data Analysis- Use PowerShell to extract and analyze Active Directory users, groups, memberships, ownership, and attributes.
- Use Excel, Python, or similar tools to clean, compare, reconcile, and report on identity data.
#LI-NB2
qualifications:
Preferred Qualifications
Experience with IAM, identity governance, role-based access control, access-package design, or entitlement rationalization.
Experience supporting Active Directory cleanup, group analysis, role mining, or access-review initiatives.
Experience using PowerShell for data analysis, reconciliation, automation, or reporting.
Experience with ServiceNow request, incident, change, or identity-related workflows.
Key Measures of Success
Meaningful access patterns and group relationships are identified.
Actionable recommendations are produced for cleanup, consolidation, ownership, and access packages.
Findings are clearly documented and validated with business and technical stakeholders.
Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.
At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact
Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).
This posting is open for thirty (30) days.
![]()
Never miss an opportunity! Create an alert based on the job you applied for.
