IAM IT Operations Analyst III

Acima; Plano (TX); On-site; USD 110,000 - 145,000; Full time

Job summary

Upbound Group in Plano, TX is seeking an IAM IT Operations Analyst III to administer Entra ID and Active Directory, manage identity lifecycles, and develop automation scripts. You will serve as a senior escalation resource for IAM, VIP issues, and cross-team coordination across Workday, ServiceNow, and downstream apps.

The role emphasizes hands-on scripting, troubleshooting, and a drive for improvements in IAM operations. On-site required; U.S. work authorization required.

Qualifications

• 3–5+ years of IAM operations and identity administration.
• Hands-on experience with Microsoft Entra ID, Active Directory, identity lifecycle management, SSO, SCIM, provisioning, synchronization, MFA, RBAC, and least privilege.
• Proficiency with PowerShell and Python for IAM administration, automation, reporting, reconciliation, and remediation.
• Strong troubleshooting, communication, documentation, and organizational skills with the ability to independently own complex issues through resolution.

Responsibilities

• Administer and troubleshoot Entra ID and Active Directory users, groups, authentication methods, enterprise applications, SSO, SCIM, synchronization, provisioning, and licensing.
• Support joiner, mover, leaver, rehire, transfer, contractor, and contractor-to-coworker lifecycle processes across Workday, IAM, Entra ID, Active Directory, ServiceNow, and downstream applications.
• Investigate provisioning, synchronization, authentication, and access failures and validate identity attributes, group membership, licensing, and lifecycle status.
• Develop, troubleshoot, document, and safely execute PowerShell and Python scripts for IAM administration, reporting, reconciliation, automation, and bulk remediation.
• Identify and remediate orphaned, stale, duplicate, cloud-only, legacy, improperly synchronized, unauthorized, and lifecycle-excluded identities.
• Apply appropriate scripting controls including testing, logging, and audit documentation.
• Serve as a senior escalation resource for complex IAM, authentication, provisioning, access, and onsite technology issues.
• Independently determine root cause and drive high-impact incidents through final resolution.
• Provide responsive support for executives and VIPs and coordinate resolution with IAM Engineering, Cybersecurity, Service Desk, HR, Application Owners, and other technology teams.
• Mentor Analysts I-II, provide technical guidance, lead knowledge transfer, and maintain runbooks, Knowledge Base articles, and scripting documentation.
• Identify opportunities to automate repetitive work and improve IAM operational processes.
• Lead smaller IAM automation and remediation efforts through requirements, testing, implementation, validation, and ongoing support.

Skills

Microsoft Entra ID

PowerShell

Python

Identity lifecycle management

Job description

Job Description:

IAM IT OPERATIONS ANALYST III

Plano, TX • On-Site Required • Full-Time

POSITION SUMMARY

The IAM IT Operations Analyst III is a senior technical resource responsible for Microsoft Entra ID administration, identity lifecycle management, scripting and automation, account remediation, and complex technical troubleshooting. The role serves as a senior escalation point for IAM, onsite technology, and VIP/executive issues and works across Workday, Entra ID, Active Directory, ServiceNow, and downstream applications to resolve problems and improve IAM operations.

KEY RESPONSIBILITIES

Identity & Access Management

• Administer and troubleshoot Entra ID and Active Directory users, groups, authentication methods, enterprise applications, SSO, SCIM, synchronization, provisioning, and licensing.
• Support joiner, mover, leaver, rehire, transfer, contractor, and contractor-to-coworker lifecycle processes across Workday, IAM, Entra ID, Active Directory, ServiceNow, and downstream applications.
• Investigate provisioning, synchronization, authentication, and access failures and validate identity attributes, group membership, licensing, and lifecycle status.

Automation & Account Remediation

• Develop, troubleshoot, document, and safely execute PowerShell and Python scripts for IAM administration, reporting, reconciliation, automation, and bulk remediation.
• Identify and remediate orphaned, stale, duplicate, cloud-only, legacy, improperly synchronized, unauthorized, and lifecycle-excluded identities.
• Apply appropriate scripting controls including testing, logging, and audit documentation.

Technical Escalations & VIP Support

• Serve as a senior escalation resource for complex IAM, authentication, provisioning, access, and onsite technology issues.
• Independently determine root cause and drive high-impact incidents through final resolution.
• Provide responsive support for executives and VIPs and coordinate resolution with IAM Engineering, Cybersecurity, Service Desk, HR, Application Owners, and other technology teams.

Leadership & Continuous Improvement

• Mentor Analysts I-II, provide technical guidance, lead knowledge transfer, and maintain runbooks, Knowledge Base articles, and scripting documentation.
• Identify opportunities to automate repetitive work and improve IAM operational processes.
• Lead smaller IAM automation and remediation efforts through requirements, testing, implementation, validation, and ongoing support.

REQUIRED QUALIFICATIONS

• 3-5+ years of progressively responsible experience in IAM Operations, identity administration, IT Operations, directory services, automation, or a comparable technical role.
• Advanced hands-on experience with Microsoft Entra ID, Active Directory, identity lifecycle management, SSO, SCIM, provisioning, synchronization, MFA, RBAC, and least privilege.
• Demonstrated proficiency with PowerShell and Python for IAM administration, automation, reporting, reconciliation, and remediation.
• Strong troubleshooting, communication, documentation, customer-service, and organizational skills with the ability to independently own complex issues through resolution.

PREFERRED QUALIFICATIONS

• Experience with ServiceNow workflow automation, Flow Designer, reporting, or related automation tools.
• Experience with hybrid identity environments, identity governance, privileged access, access reviews, and audit controls.
• Experience supporting executives/VIPs and leading technical automation or process-improvement initiatives.

WORK ENVIRONMENT & EXPECTATIONS

• On-site presence in Plano, TX is required.
• Must appropriately handle confidential information, sensitive identity data, and privileged administrative access.
• Must follow established security, approval, change-management, least-privilege, segregation-of-duties, documentation, and audit requirements.

Employment Eligibility

To be eligible for this opportunity, you must be authorized to work in the U.S. Upbound Group does not offer employment-based immigration sponsorship for this role, including OPT or CPT.

Equal Opportunity Employer

Upbound Group is an equal opportunity employer committed to ensuring all employment decisions are made on a non-discriminatory basis in accordance with applicable federal, state, and local laws.

Upbound Group is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.