IAM (Identity and Access Management) Analyst

Position: IAM (Identity and Access Management) Analyst

Location: Seattle, WA (100% REMOTE)

Contract: 12+ Months and Extendable  

Client: Sound Transit

Certifications: CIAM, CISSP, CISA, CISM, Sec+, GSEC, Microsoft SC-300 or other relevant certifications (Any-One)

Description:

Under general direction, the Identity and Access Management Analyst assists with the operations of the Agency''s Information Security division for its identity and access management program. The IAM Analyst’s function is to support service owners and system owners in ensuring the confidentiality and integrity of information systems and data across the entire organization through proper entitlement and identity management.

The IAM Analyst performs three core functions for the Agency. The first is the day-to-day operations of the IAM Program, the second is the identification, investigation and implementation of identity management solutions. The third function consists of implementing identity and access management controls, which requires extensive knowledge and experience. The IAM Analyst is expected to be fully aware of the Agency''s security goals as established by its stated policies, procedures, and guidelines and to actively work towards upholding those goals

Serve as a point of contact for identity and access management lifecycle controls and processes.

Design and implement identity management controls and tools.

Assist in developing IAM governance instruments.

Leverage various IAM technologies to verify or audit user and system entitlements.

Work across the organization to continually improve cyber resilience within the identity management space.

Identify and assess technology-related risks to information security associated with prospective cloud infrastructure solutions authentication mechanisms; and recommend appropriate mitigating controls.

Evaluate any prospective technology solution for adherence to documented agency standards, policies, and regulatory responsibilities.

Develop technical IAM focused standards to interpret and implement applicable information security policies and controls.

Advise and consult with internal customers on security assurance activities, identity management, and access controls.

Evangelize information security at Sound Transit.

Interact with auditors and other external vendors as needed.

Focus on keeping professional skills current.

Keep up to date on latest information security threats and countermeasures

Bachelor’s Degree in computer science, information technology, management information systems, or closely related field; OR an equivalent combination of education and experience.

Minimum of 2-5 years of information systems security (or cyber security) experience

•                 At least 2 years of security control implementation experience.

•                 At least 4 years of identity and access lifecycle management operations experience.

•                 At least 4 years of Microsoft Active Directory management, auditing, or related experience.

Strong understanding of Microsoft Azure / M365, identity management, and privileged identity management.

Deep knowledge of security operations: information security, risk assessment, and security metrics.

Demonstrated skills in identity and access management.

Working knowledge of risk-based methodologies and one or more of the following frameworks: ISO 27001/2:2017, PCI-DSS, or NIST SP 800-53r5.

Principles of business letter writing and basic report preparation.

English usage, spelling, grammar, and punctuation.

Modern office procedures, methods, and equipment including computers and computer applications such as word processing, spreadsheets, and statistical databases.