IAM Business Analyst

Programmers.io; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Job summary

Programmers.io in Washington, DC seeks an experienced Business Analyst with 8+ years in Identity & Access Management (IAM), RBAC, and SAFe delivery to partner with stakeholders and security teams to drive IAM initiatives in an Agile environment.

You will gather, analyze, and document IAM requirements, translate them into epics and user stories, support RBAC models and access governance, and coordinate with IAM architects and cross-functional teams to ensure compliance with SOX, GDPR, HIPAA,

Qualifications

• Bachelor's degree in a related field.
• 8+ years of Business Analysis experience in IAM/IGA.
• 5+ years of IAM/IGA domain experience.
• Experience working in Agile/SAFe environments.
• Strong analytical, communication, and stakeholder management skills.

Responsibilities

• Gather, analyze, and document IAM requirements.
• Conduct workshops and stakeholder interviews to understand access management needs and security requirements.
• Translate business requirements into epics, features, user stories, and acceptance criteria.
• Support IAM implementations, enhancements, and integrations across enterprise applications.
• Analyze current access management processes and recommend improvements.
• Define and document RBAC models, SoD, access review processes, and user lifecycle management requirements.
• Collaborate with IAM architects and technical to ensure solution alignment with business objectives.
• Onsite and Offshore Coordination

Skills

IAM

RBAC

JML Processes

IGA

Access Governance

Access Reviews

SoD

PAM

SSO

Identity Lifecycle

SAFe Agile

Education

Bachelor's degree in Computer Science, Information Systems, Business Administration, or related field

Tools

Saviynt

Okta

CyberArk

Ping Identity

Oracle Identity Manager (OIM)

RSA Identity Governance

Job description

We are seeking an experienced Business Analyst with 8+ years of experience in Identity & Access Management (IAM), Access Governance, and SAFe Agile delivery methodologies. The candidate will work closely with business stakeholders, product owners, security teams, architects, and development teams to gather, analyze, and document IAM requirements while driving successful delivery of IAM and Security initiatives in an Agile environment.

The ideal candidate should possess strong expertise in IAM processes, role-based access control (RBAC), access certification, provisioning/deprovisioning, compliance requirements, and Agile delivery practices.

Key Responsibilities

IAM Business Analysis

• Gather, analyze, and document business and functional requirements related to IAM initiatives.
• Conduct workshops and stakeholder interviews to understand access management needs and security requirements.
• Translate business requirements into epics, features, user stories, and acceptance criteria.
• Support IAM implementations, enhancements, and integrations across enterprise applications.
• Analyze current access management processes and recommend improvements.
• Define and document RBAC models, segregation of duties (SoD), access review processes, and user lifecycle management requirements.
• Collaborate with IAM architects and technical to ensure solution alignment with business objectives.
• Onsite and Offshore Coordination

SAFe Agile Responsibilities

• Participate in Program Increment (PI) Planning, Sprint Planning, Daily Stand-ups, Reviews, and Retrospectives.
• Work closely with Product Owners and Scrum Teams to prioritize backlog items.
• Create and maintain user stories, features, process flows, and business requirement documents.
• Support Agile Release Train (ART) activities and ensure timely delivery of business requirements.
• Facilitate communication between business and technical teams throughout the development lifecycle.

Stakeholder & Compliance Management

• Engage with business units, security teams, auditors, and compliance stakeholders.
• Support audit and compliance activities related to IAM controls.
• Ensure requirements align with regulatory standards such as SOX, GDPR, HIPAA, PCI-DSS, and NIST frameworks.
• Develop process documentation, training materials, and operational procedures.

Required Skills

IAM Expertise

• Identity & Access Management (IAM)
• Joiner-Mover-Leaver (JML) Processes
• Role-Based Access Control (RBAC)
• Access Governance & Administration (IGA)
• Access Reviews & Certifications
• Segregation of Duties (SoD)
• Privileged Access Management (PAM)
• Single Sign-On (SSO)
• Identity Lifecycle Management

IAM Tools (Experience in One or More)

• Saviynt
• Okta
• CyberArk
• Ping Identity
• Oracle Identity Manager (OIM)
• RSA Identity Governance

Agile & BA Skills

• SAFe Agile Certification preferred
• User Story creation and backlog management
• Requirements elicitation and analysis
• Process Mapping (Visio, Lucidchart)
• UAT Planning and Execution

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Business Administration, or related field.
• 8+ years of Business Analysis experience.
• 5+ years of IAM/IGA domain experience.
• Experience working in Agile/SAFe environments.
• Strong analytical, communication, and stakeholder management skills.

Preferred Certifications

• SAFe Agilist (SA) or SAFe Practitioner
• Certified Business Analysis Professional (CBAP)
• SailPoint Certification
• Saviynt Certification
• Microsoft Certified: Identity and Access Administrator Associate
• Certified Identity and Access Manager (CIAM)

Nice to Have

• Experience in Data Privacy and Governance initiatives.
• Experience working with financial, healthcare, government, or large enterprise environments.
• Knowledge of cloud security and Zero Trust architecture.
• Exposure to DevSecOps practices and security frameworks.

Key Competencies: IAM, IGA, RBAC, SailPoint, Saviynt, Entra ID, Okta, CyberArk, SAFe Agile, JIRA, Azure DevOps, Stakeholder Management, UAT, Compliance, Security Governance, Process Improvement.