IAM Business Analyst

Programmers.io; Washington (District of Columbia); On-site; USD 120,000 - 150,000; Full time

Job summary

Programmers.io is seeking an experienced IAM Business Analyst with 8+ years working in Identity & Access Management, RBAC, access governance, and SAFe Agile delivery. The role involves gathering IAM requirements, collaborating with security teams, architects, and product owners to drive successful IAM initiatives in an Agile environment.

The ideal candidate will have expertise in RBAC, access reviews, provisioning/deprovisioning, audit/compliance activities, and experience with leading IAM

Qualifications

• 8+ years as a Business Analyst in IAM/IGA domains.
• Experience with SAFe Agile delivery methodologies.
• Strong analytical, communication, and stakeholder management skills.
• Experience with regulatory standards (SOX, GDPR, HIPAA, PCI-DSS, NIST).

Responsibilities

• Gather, analyze, and document IAM business and functional requirements.
• Translate requirements into epics, features, user stories, and acceptance criteria.
• Support IAM implementations and integrations across enterprise apps.
• Define and document RBAC models, SoD, and user lifecycle management.
• Participate in PI Planning, Sprint Planning, and ART ceremonies.
• Collaborate with IAM architects and security teams to align solutions with business goals.
• Engage with auditors and compliance stakeholders to support SOX, GDPR, HIPAA, PCI-DSS, and NIST.
• Develop process documentation, training materials, and operational procedures.

Skills

IAM Expertise

RBAC

SoD

Access Governance

JML (Joiner-Mover-Leaver)

RBAC Models

Audit & Compliance

SAFe Agile

Stakeholder Management

UAT Planning

SAFe PI Planning

Education

Bachelor's degree in Computer Science or equivalent

Tools

SailPoint IdentityIQ/IdentityNow

Saviynt

Microsoft Entra ID (Azure AD)

Okta

CyberArk

Ping Identity

OIM

RSA Identity Governance

Job description

Job Summary

We are seeking an experienced Business Analyst with 8+ years of experience in Identity & Access Management (IAM), Access Governance, and SAFe Agile delivery methodologies. The candidate will work closely with business stakeholders, product owners, security teams, architects, and development teams to gather, analyze, and document IAM requirements while driving successful delivery of IAM and Security initiatives in an Agile environment.

The ideal candidate should possess strong expertise in IAM processes, role-based access control (RBAC), access certification, provisioning/deprovisioning, compliance requirements, and Agile delivery practices.

Key Responsibilities

IAM Business Analysis

• Gather, analyze, and document business and functional requirements related to IAM initiatives.
• Conduct workshops and stakeholder interviews to understand access management needs and security requirements.
• Translate business requirements into epics, features, user stories, and acceptance criteria.
• Support IAM implementations, enhancements, and integrations across enterprise applications.
• Analyze current access management processes and recommend improvements.
• Define and document RBAC models, segregation of duties (SoD), access review processes, and user lifecycle management requirements.
• Collaborate with IAM architects and technical to ensure solution alignment with business objectives.
• Onsite and Offshore Coordination

SAFe Agile Responsibilities

• Participate in Program Increment (PI) Planning, Sprint Planning, Daily Stand-ups, Reviews, and Retrospectives.
• Work closely with Product Owners and Scrum Teams to prioritize backlog items.
• Create and maintain user stories, features, process flows, and business requirement documents.
• Support Agile Release Train (ART) activities and ensure timely delivery of business requirements.
• Facilitate communication between business and technical teams throughout the development lifecycle.

Stakeholder & Compliance Management

• Engage with business units, security teams, auditors, and compliance stakeholders.
• Support audit and compliance activities related to IAM controls.
• Ensure requirements align with regulatory standards such as SOX, GDPR, HIPAA, PCI-DSS, and NIST frameworks.
• Develop process documentation, training materials, and operational procedures.

Required Skills

IAM Expertise

• Identity & Access Management (IAM)
• User Provisioning & Deprovisioning
• Joiner-Mover-Leaver (JML) Processes
• Role-Based Access Control (RBAC)
• Access Governance & Administration (IGA)
• Access Reviews & Certifications
• Segregation of Duties (SoD)
• Privileged Access Management (PAM)
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• Identity Lifecycle Management

IAM Tools (Experience in One or More)

• SailPoint IdentityIQ / IdentityNow
• Saviynt
• Microsoft Entra ID (Azure AD)
• Okta
• CyberArk
• Ping Identity
• Oracle Identity Manager (OIM)
• RSA Identity Governance

Agile & BA Skills

• SAFe Agile Certification preferred
• Agile Scrum methodologies
• PI Planning & ART ceremonies
• User Story creation and backlog management
• Requirements elicitation and analysis
• Process Mapping (Visio, Lucidchart)
• JIRA, Azure DevOps, Confluence
• UAT Planning and Execution

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Business Administration, or related field.
• 8+ years of Business Analysis experience.
• 5+ years of IAM/IGA domain experience.
• Experience working in Agile/SAFe environments.
• Strong analytical, communication, and stakeholder management skills.

Preferred Certifications

• SAFe Agilist (SA) or SAFe Practitioner
• Certified Business Analysis Professional (CBAP)
• Certified Scrum Product Owner (CSPO)
• SailPoint Certification
• Saviynt Certification
• Microsoft Certified: Identity and Access Administrator Associate
• Certified Identity and Access Manager (CIAM)

Nice to Have

• Experience in Data Privacy and Governance initiatives.
• Experience working with financial, healthcare, government, or large enterprise environments.
• Knowledge of cloud security and Zero Trust architecture.
• Exposure to DevSecOps practices and security frameworks.

Key Competencies: IAM, IGA, RBAC, SailPoint, Saviynt, Entra ID, Okta, CyberArk, SAFe Agile, JIRA, Azure DevOps, Stakeholder Management, UAT, Compliance, Security Governance, Process Improvement.