IAM Directory and IGA SeniorAnalyst

University of Southern California; Glendale (CA); Hybrid; USD 119,000 - 152,000; Full time

Job summary

The University of Southern California is seeking an IAM Directory and IGA Senior Analyst to design, configure, test and implement identity governance and directory service solutions that support secure identity lifecycle management, authentication, authorization and access governance.

This role works at USC's CAL location in a hybrid environment, translating business needs into scalable IAM solutions and driving automation and security controls across enterprise applications.

Qualifications

• Bachelor's degree required; related field or combined experience accepted.
• 4+ years in Identity and Access Management, Directory Services, or related field.
• Hands-on IAM implementation and troubleshooting experience.
• Unix command line proficiency; SQL and LDAP familiarity.
• Knowledge of PBAC/RBAC and IAM concepts; strong communication skills.
• Documentation of architecture diagrams, runbooks and decisions.

Responsibilities

• Analyze requirements for identity governance; configure lifecycle workflows and provisioning.
• Design and implement directory services for authentication and authorization.
• Investigate complex IAM issues; perform root-cause analysis and remediation.
• Develop integrations between IAM platforms and enterprise apps; ensure security alignment.
• Create and maintain technical docs, runbooks and implementation procedures.
• Collaborate with owners and stakeholders to translate needs into technical specs.
• Identify automation opportunities and enhance IAM capabilities and controls.

Skills

Unix command line

SQL

LDAP

RBAC

PBAC

AuthN vs AuthZ

Communication skills

Root cause analysis

Education

Bachelor's degree

Bachelor's degree in Instruction Systems Technology Or Computer Science Or related field

Tools

SailPoint IIQ

Saviynt

Oracle Unified Directory

Microsoft Entra

ForgeRock

Duo

Shibboleth

CyberArk

BeyondTrust

Job description

Strengthen Identity Governance and Access at USC

USC is expanding its Cybersecurity IAM capabilities to strengthen how identities, access and directory services are managed across the university. As the IAM Directory and IGA Senior Analyst, you will play a key technical role in designing, configuring, testing and implementing identity governance administration (IGA) and directory service solutions that support secure identity lifecycle management, authentication, authorization and access governance.

This is an opportunity for an experienced IAM professional to work at the intersection of identity governance, directory services, cybersecurity and enterprise technology within a major research university. You will translate business and technical requirements into scalable IAM solutions, support enterprise application integrations, investigate complex identity and access issues, and identify opportunities to improve automation, security controls and operational effectiveness.

The position reports to the IGA & Directory Services Manager and is based at USC's CAL location in a hybrid work environment.

Job Accountabilities

• Analyzes business and technical requirements for identity governance processes. Configures and enhances identity lifecycle workflows, access controls, role structures, provisioning processes and governance solutions to support operational and security requirements. Performs impact analysis and validates technical solutions prior to implementation.
• Designs, configures, tests and implements directory service solutions supporting authentication, authorization, identity synchronization and enterprise application integration. Evaluates system requirements and develops technical configurations that improve reliability, security and operational efficiency.
• Investigates complex identity, access and directory service issues. Conducts root-cause analysis, evaluates system behavior, develops corrective actions and implements sustainable technical solutions to prevent recurrence.
• Develops, configures, tests and implements integrations between identity governance platforms, directory services and enterprise applications. Validates functional requirements and ensures solutions operate in accordance with security and access management standards.
• Creates and maintains technical documentation, workflow specifications, system configurations, support runbooks and implementation procedures. Documents design decisions, testing results and operational requirements.
• Collaborates with application owners, technology teams and business stakeholders to evaluate identity and access requirements. Translates functional needs into technical specifications and recommends solutions aligned with established IAM standards.
• Evaluates existing identity governance and directory service capabilities, identifies opportunities for automation and process improvement, and recommends enhancements that strengthen service delivery, security controls and operational effectiveness. Maintains current knowledge of identity and access management technologies and practices. Encourages a workplace culture where all employees are valued, value others and have the opportunity to contribute through their ideas, words and actions, in accordance with the USC Code of Ethics.

Minimum Qualifications

Great candidates for the position of IAM Directory and IGA Senior Analyst will meet the following qualifications:

• Bachelor's degree
• Bachelor's degree in Instruction Systems Technology Or Computer Science Or in related field(s)
• Combined experience/education as substitute for minimum education
• 4 years in Identity and Access Management, Directory Services, Identity Governance, Information Security, Systems Administration, or related technology discipline
• Combined experience/education as substitute for minimum work experience
• Hands-on technical experience in implementing and troubleshooting of IAM solutions (e.g., SailPoint IIQ and ISC, Saviynt and Oracle Unified Directory).
• Proficiency within a Unix command line.
• Proficiency working with data, with query languages (e.g., SQL) and working with Directories (e.g., LDAP).
• Proficiency with IAM concepts (e.g., PBAC, RBAC, AuthN vs AuthZ).
• Excellent written and verbal communication skills; comfortable driving requirements gathering, architectural discussions and project reporting with non-technical business stakeholders.
• Maintain technical documentation including architecture diagrams, decision records, and runbooks.

Preferred Qualifications

• 6 years of experience designing, configuring, implementing or supporting enterprise IAM, IGA, directory service or authentication platforms.
• Hands-on experience with SSO solutions such as Microsoft Entra, ForgeRock, Duo, Cirrus Identity Bridge or Shibboleth.
• Experience with PAM solutions such as CyberArk or BeyondTrust.
• Experience with identity verification technologies such as Persona.
• Experience in IAM within higher education. Experience in other complex, decentralized environments such as healthcare, technology, media and telecommunications, or financial services is also relevant.
• Understanding of Zero Trust architecture, identity-based attack techniques, and modern IAM controls.
• Experience leading enterprise identity transformations or directory modernization programs, including migration from legacy platforms at scale.
• Experience with IAM reference architecture.
• Demonstrated ability to establish and gain visibility into service accounts and secrets in hybrid cloud and on-premises environments.
• Experience working at or with professional services firms, such as Big Four firms, and IAM software vendors.
• Project management experience on IAM projects.
• CISSP certification or similar.
• IAM software certification, such as SailPoint Certified Engineer or CyberArk Guardian.

In addition, the successful candidate must also demonstrate, through ideas, words and actions, a strong commitment to USC's Unifying Values of integrity, excellence, community, well-being, open communication, and accountability.

Salary and Benefits

The annual base salary range for this position is $118,759 - $151,880. When extending an offer of employment, the University of Southern California considers factors such as, but not limited to, the scope and responsibilities of the position, the candidate's work experience, education/training, key skills, internal peer equity, federal, state, and local laws, contractual stipulations, grant funding, as well as external market and organizational considerations.

To support faculty and staff well-being, USC provides benefits-eligible employees with a broad range of benefits and perks to help protect their and their dependents' health, wealth, and future. These benefits are available as part of the overall compensation and total rewards package. You can learn more about USC's comprehensive benefits here.

Ready to Make an Impact?

If you are an experienced IAM professional looking to work at the intersection of identity governance, directory services and cybersecurity, consider joining USC's Cybersecurity IAM team. Bring your expertise to a role that will help strengthen secure identity lifecycle management, access governance and enterprise identity services across one of the nation's leading research universities.

USC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other characteristic protected by law or USC policy. USC observes affirmative action obligations consistent with state and federal law.