Identity Access Management / IT Analyst IV

Identity Access Management / IT Analyst IV

3M

6 Month

4 Days Onsite in Maplewood, MN

Can take Relocation for the Exceptional Candidates

No H1B

Need ID Copy and LinkedIn

$55/HR C2C

JOB DESCRIPTION

Duties:

Windows Server & Workstation Administration

• Administer Windows Servers — RDP access, local user/group management, GPO configuration, and IAM-related access controls
• Manage Windows workstations — local account administration, group membership, GPO enforcement, and security hardening
• Understand and apply IAM principles (least privilege, separation of duties) across server and workstation environments

CyberArk & Endpoint Security Operations

• Support CyberArk Privileged Cloud operations — account onboarding, safe management, and platform configurations
• Troubleshoot CyberArk ticket issues including password rotation failures, CPM errors, session connectivity, and account lockouts
• Support endpoint security tools including CyberArk EPM and CrowdStrike — policy management, exclusions, and incident triage

Automation & Scripting

• Write PowerShell scripts to automate routine tasks — account provisioning, reporting, health checks, and bulk operations
• Leverage CyberArk and other APIs to build automation for onboarding, credential management, and integration workflows

Documentation & Process

• Create and maintain process documentation — SOPs, runbooks, knowledge articles, and troubleshooting guides. Assist in audits when required.
• Keep documentation current with platform changes, new procedures, and lessons learned

Communication & Operational Metrics

• Demonstrate excellent communication — prompt follow-up and response to tickets, emails, and team chat
• Maintain operational metrics by ensuring incidents and service requests are resolved and closed within SLA
• Provide regular status updates to stakeholders; escalate appropriately when SLAs are at risk

Skills:

• 5+ years in IT operations with focus on Windows and/or PAM technologies
• Strong Windows Server skills — RDP, local users/groups, GPO, IAM concepts, service accounts
• Windows workstation administration — same as above applied to endpoint environments
• Understanding of CyberArk Privileged Cloud, CyberArk EPM, and CrowdStrike
• Ability to troubleshoot CyberArk issues — password rotation, CPM failures, session errors
• PowerShell scripting proficiency; experience leveraging APIs for automation
• Ability to create and maintain clear process documentation
• Excellent communication skills — prompt follow-up, responsive to chat/email/tickets
• Disciplined approach to operational metrics — SLA adherence and timely incident closure

Education:

Bachelor''s in CS, InfoSec, IT, or related field — or equivalent experience.