IAM IT Operations Analyst III

Upbound Group Inc.; Plano (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

Upbound Group is seeking an IAM IT Operations Analyst III in Plano, TX. This on-site, full-time role focuses on Microsoft Entra ID administration, identity lifecycle management, scripting, and complex IAM troubleshooting across Workday, Entra ID, Active Directory, ServiceNow and related applications.

The ideal candidate has 3–5+ years in IAM operations, strong PowerShell and Python skills, and the ability to mentor junior analysts while leading automation and remediation efforts for sensitive

Qualifications

• 3–5+ years in IAM operations or equivalent technical role.
• Advanced hands-on experience with Microsoft Entra ID and Active Directory.
• Proficient in PowerShell and Python for automation and remediation.

Responsibilities

• Administer and troubleshoot Entra ID and Active Directory users, groups, authentication methods, and licensing.
• Support lifecycle processes across Workday, IAM, Entra ID, Active Directory, ServiceNow, and downstream apps.
• Investigate provisioning, synchronization, authentication, and access failures and validate identity attributes.

Skills

Microsoft Entra ID

Active Directory

PowerShell

Python

Identity lifecycle management

Automation

Troubleshooting & Documentation

Tools

Workday

ServiceNow

Job description

IAM IT OPERATIONS ANALYST III

Plano, TX • On-Site Required • Full-Time

POSITION SUMMARY

The IAM IT Operations Analyst III is a senior technical resource responsible for Microsoft Entra ID administration, identity lifecycle management, scripting and automation, account remediation, and complex technical troubleshooting. The role serves as a senior escalation point for IAM, onsite technology, and VIP/executive issues and works across Workday, Entra ID, Active Directory, ServiceNow, and downstream applications to resolve problems and improve IAM operations.

KEY RESPONSIBILITIES

Identity & Access Management

• Administer and troubleshoot Entra ID and Active Directory users, groups, authentication methods, enterprise applications, SSO, SCIM, synchronization, provisioning, and licensing.
• Support joiner, mover, leaver, rehire, transfer, contractor, and contractor-to-coworker lifecycle processes across Workday, IAM, Entra ID, Active Directory, ServiceNow, and downstream applications.
• Investigate provisioning, synchronization, authentication, and access failures and validate identity attributes, group membership, licensing, and lifecycle status.

Automation & Account Remediation

• Develop, troubleshoot, document, and safely execute PowerShell and Python scripts for IAM administration, reporting, reconciliation, automation, and bulk remediation.
• Identify and remediate orphaned, stale, duplicate, cloud-only, legacy, improperly synchronized, unauthorized, and lifecycle-excluded identities.
• Apply appropriate scripting controls including testing, logging, and audit documentation.

Technical Escalations & VIP Support

• Serve as a senior escalation resource for complex IAM, authentication, provisioning, access, and onsite technology issues.
• Independently determine root cause and drive high-impact incidents through final resolution.
• Provide responsive support for executives and VIPs and coordinate resolution with IAM Engineering, Cybersecurity, Service Desk, HR, Application Owners, and other technology teams.

Leadership & Continuous Improvement

• Mentor Analysts I-II, provide technical guidance, lead knowledge transfer, and maintain runbooks, Knowledge Base articles, and scripting documentation.
• Identify opportunities to automate repetitive work and improve IAM operational processes.
• Lead smaller IAM automation and remediation efforts through requirements, testing, implementation, validation, and ongoing support.

REQUIRED QUALIFICATIONS

• 3–5+ years of progressively responsible experience in IAM Operations, identity administration, IT Operations, directory services, automation, or a comparable technical role.
• Advanced hands‑on experience with Microsoft Entra ID, Active Directory, identity lifecycle management, SSO, SCIM, provisioning, synchronization, MFA, RBAC, and least privilege.
• Demonstrated proficiency with PowerShell and Python for IAM administration, automation, reporting, reconciliation, and remediation.
• Strong troubleshooting, communication, documentation, customer-service, and organizational skills with the ability to independently own complex issues through resolution.

PREFERRED QUALIFICATIONS

• Experience with ServiceNow workflow automation, Flow Designer, reporting, or related automation tools.
• Experience with hybrid identity environments, identity governance, privileged access, access reviews, and audit controls.
• Experience supporting executives/VIPs and leading technical automation or process‑improvement initiatives.

WORK ENVIRONMENT & EXPECTATIONS

• On-site presence in Plano, TX is required.
• Must appropriately handle confidential information, sensitive identity data, and privileged administrative access.
• Must follow established security, approval, change‑management, least‑privilege, segregation‑of‑duties, documentation, and audit requirements.

Employment Eligibility

To be eligible for this opportunity, you must be authorized to work in the U.S. Upbound Group does not offer employment-based immigration sponsorship for this role, including OPT or CPT.

Equal Opportunity Employer

Upbound Group is an equal opportunity employer committed to ensuring all employment decisions are made on a non-discriminatory basis in accordance with applicable federal, state, and local laws.