IAM Security Analyst

Quantam; Frankfort (KY); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health benefits

Paid time off

401(k) plan

Job summary

Quantam Solutions is seeking an experienced IAM Security Analyst to support client security technologies and identity access management deployment. This role will serve as SME for security, focusing on IAM and case management systems, in a hybrid or fully remote setup.

Candidates should have hands-on experience with on-prem and cloud IAM in Okta, Azure AD, and Active Directory, plus strong policy development, incident response, and collaboration with IT teams.

Qualifications

• Deep technical expertise in Microsoft Active Directory and Microsoft Entra ID.
• Experience designing IAM integrations, provisioning workflows, and access controls.
• Proven experience implementing and maintaining role-based access control frameworks.
• Proven ability to lead and mentor technical engineering teams.
• Strong understanding of identity security principles and enterprise authentication models.
• Experience with NIST CSF, ISO 27001, or CIS Controls frameworks.
• Bachelor's degree, preferably in CS/IT/Engineering, or equivalent experience.

Responsibilities

• Serve as the primary IT Security SME for IAM and related technologies.
• Manage user authentication, authorization, and access control policies.
• Design and build RBAC security frameworks for the department.
• Perform vulnerability scans, penetration tests, and risk assessments.
• Monitor security alerts, investigate breaches, and respond to incidents.
• Develop, enforce, and update security policies to meet regulatory requirements.
• Educate staff on security best practices and incident response.
• Support business continuity and disaster recovery planning.
• Administer IAM systems including Okta, AD, Azure AD, and privileged access workstations.
• Monitor SIEM platforms (Splunk, Microsoft Sentinel, QRadar) and tune alerts.
• Implement MFA, certificate management, and SSO across apps.
• Develop security policies aligned with NIST CSF, ISO 27001, CIS Controls.
• Support security audits for SOC 2, HIPAA, PCI-DSS, or FedRAMP.
• Review new systems/vendors for security as part of change management.
• Investigate phishing, malware, and unauthorized access; document findings and corrective controls.
• Identify and mitigate project risks and dependencies, develop contingency plans.

Skills

Active Directory

Entra ID

IAM integrations

RBAC frameworks

Mentoring teams

Identity security

Education

Bachelor's degree in IT/CS/Engineering

Tools

Okta

Azure AD

Active Directory

ServiceNow

Splunk

Microsoft Sentinel

QRadar

Palo Alto

Fortinet FortiGate

Cisco ASA/FTD

CrowdStrike Defender

Python

PowerShell

Job description

Quantam Solutions provides IT solutions and consulting for various clients. We offer competitive hourly wages, health benefits, paid time off, and a 401(k) plan. We are currently seeking a IAM Security Analyst. Candidates will be able to work either hybrid or fully remote. Candidates that can work hybrid are preferred.

Overview:

We are seeking an experienced Information Security Analyst and Administrator to support our client's security-related technologies, processes, and implementations. This position will serve as the primary IT Security subject matter expert especially with the deployment of a new Identity Access Management solution and case management system.

Will need knowledge and experience with both on-premises and cloud environments especially within OKTA, Azure platform, and Active Directory. Strong communication and organization skills, and a deep understanding of Identity and Access Management solutions.

Duties & Responsibilities:

• Server as primary IT Security Subject Matter Expert (SME).
• Manage user authentication, authorization, and access control policies to prevent unauthorized access
• Support the design and build of role-based access control security frameworks for the department,
• Perform vulnerability scans, penetration tests, and risk assessments to identify and mitigate threats
• Monitor security alerts, investigate breaches, and respond to incidents promptly
• Develop, enforce, and update security policies; ensure compliance with legal and regulatory requirements
• Educating staff on security best practices and protocols
• Support the creation and maintenance of business continuity and disaster recovery plans
• Administer identity and access management (IAM) systems including OKTA, Active Directory, Azure AD, and privileged access workstations
• Monitor SIEM platforms (Splunk, Microsoft Sentinel, QRadar) for security events, tune alert rules, and elevate confirmed incidents
• Implement and enforce multi-factor authentication, certificate management, and single sign-on configurations across enterprise applications
• Develop and maintain security policies, standards, and procedures aligned with NIST CSF, ISO 27001, or CIS Controls frameworks
• Support security audits and compliance assessments for SOC 2, HIPAA, PCI-DSS, or FedRAMP by gathering evidence and remediating findings
• Perform security reviews on new systems, applications, and vendors as part of the change management and third-party risk process
• Investigate phishing incidents, malware infections, and unauthorized access events; document findings and implement corrective controls
• Identify and mitigate security replated project risks, issues, and dependencies, and develop contingency plans to ensure project success.

Required Skill Sets:

• Deep technical expertise in Microsoft Active Directory and Microsoft Entra ID.
• Experience designing and implementing IAM integrations, provisioning workflows, and access controls.
• Proven experience implementation & maintaining role-based access control frameworks.
• Proven ability to lead and mentor technical engineering teams.
• Strong understanding of identity security principles and enterprise authentication models.
• Previous experience with NIST CSF, ISO 27001, or CIS Controls frameworks
• Bachelor's degree, preferably in Computer Science, Information Technology, Computer Engineering, or related IT discipline; or equivalent experience

Preferred Qualifications:

• Strong understanding of identity security principles and enterprise authentication models. (SAML, OIDC, SCIM) and access control models like Fine-Grained Authorization (FGA)
• Public sector child support/HHS; modernization programs.
• Firewalls and network security: Palo Alto Networks, Fortinet FortiGate, Cisco ASA/FTD — rule writing, NAT, VPN configuration
• Endpoint security: CrowdStrike Falcon, Microsoft Defender for Endpoint, Carbon Black — alert triage, isolation, policy management
• Scripting: PowerShell and Python for automation of repetitive security tasks (log parsing, alert enrichment, AD queries)
• Experience with ServiceNow and integration with prevalent identity access management platforms.

Tools & Platforms:

• ServiceNow, Active Directory, Okta, Ping Identity, Azure AD, Cisco ASA, Fortinet FortiGate, Palo Alto PA-OS, Check Point, FortiGate, Splunk, IBM QRadar, Microsoft Sentinel, eSet, Proofpoint Nessus, Qualys, NDiscovery, OpenVAS, ISO 27001 compliance checklists, CJIS compliance tools, SSAE 16 audit frameworks, NIST & Fed Ramp frameworks.

Certifications

• CompTIA Security+, CISSP (Certified Information Systems Security Professional), Microsoft Azure Security Engineer Associate (AZ-500), Microsoft Applied Skills: Administer Active Directory Domain Services