Identity Governance and Security Posture Analyst

Triveni IT; Missouri; Remote; USD 120,000 - 170,000; Full time

Job summary

Triveni IT is seeking an experienced Identity Governance and Security Posture Analyst to evaluate and improve enterprise identity governance, entitlement management, and access certification across IGA platforms. The role focuses on investigating excessive or inappropriate access, tuning rules, and coordinating remediation of identity-related security risks.

Ideal candidates have hands‑on experience with Saviynt, SailPoint, Microsoft Entra ID Governance, or comparable platforms, plus a strong

Qualifications

• 5+ years of experience in identity governance, access governance, cybersecurity, IAM operations, or related discipline.
• Hands-on experience with an enterprise IGA platform such as Saviynt, SailPoint, Microsoft Entra ID Governance, or comparable technology.
• Strong understanding of identity lifecycle management, access requests and approvals, entitlement and role management, access certifications and reviews, segregation of duties, policy violations and exceptions.
• Experience investigating access risks, validating findings, and coordinating remediation with business owners, application owners, IAM teams and audit stakeholders.
• Ability to distinguish meaningful security risks from false positives and document governance configurations, rule logic and improvements.

Responsibilities

• Review and investigate identity governance platform findings involving excessive access, orphaned identities, stale entitlements, policy violations, and identity lifecycle exceptions.
• Evaluate findings, validate access ownership, and recommend appropriate remediation actions.
• Tune governance rules, policies, thresholds, correlation logic, roles, and entitlements to improve platform effectiveness.
• Support access certification campaigns, entitlement reviews, role analysis, segregation-of-duties reviews, and exception handling.
• Analyze identity and entitlement relationships across IGA platforms, Active Directory, Microsoft Entra ID, privileged access management systems, business applications, and HR systems.
• Improve identity ownership models, approval requirements, lifecycle controls, and governance standards.
• Identify opportunities to improve joiner/mover/leaver automation, access request workflows, certification processes, and reporting.
• Translate platform findings into remediation tickets, change requests, process improvements, and control enhancements.
• Partner with identity architects, IAM leadership, application owners, security, audit, HR, and business stakeholders.
• Track remediation progress, aging findings, repeat violations, exceptions, and risk acceptance.
• Develop governance metrics and leadership reporting covering access risk, remediation status, and platform adoption.
• Document governance configurations, rule logic, operating procedures, and recommended improvements.
• Evaluate new IGA and identity security posture management capabilities for operational use.

Skills

Saviynt

SailPoint

Entra ID Governance

Identity lifecycle

Tools

Active Directory

CyberArk

BeyondTrust

PowerShell

SQL

Python

Job description

Work Schedule: 40 hours/week | Central Time business hours

Start Date: ASAP

Position Overview

We are seeking an experienced Identity Governance and Security Posture Analyst to evaluate and improve enterprise identity governance, entitlement management, access certification, and identity security posture.

This role will use enterprise identity governance platforms to investigate excessive or inappropriate access, improve governance rules and recommendations, and coordinate remediation of identity-related security risks.

The ideal candidate has hands‑on experience with Saviynt, SailPoint, Microsoft Entra ID Governance, or a comparable enterprise Identity Governance and Administration (IGA) platform, along with a strong understanding of identity lifecycle management, access controls, and entitlement governance.

Saviynt experience is strongly preferred.

Top Required Skills – Ranked

1. Enterprise Identity Governance Platform Experience – Critical

• Hands‑on experience using Saviynt, SailPoint, Microsoft Entra ID Governance, or a comparable IGA platform
• Experience with access certifications, entitlement reviews, roles, access requests, and identity lifecycle processes
• Ability to investigate and interpret identity governance platform findings

2. Identity Security Posture & Risk Remediation – Critical

• Identify excessive permissions, orphaned identities, stale access, segregation‑of‑duties violations, and policy exceptions
• Validate findings, distinguish actual risks from false positives, and recommend corrective actions
• Track remediation, exceptions, risk acceptance, and unresolved ownership issues

3. Governance Rules, Policies & Platform Optimization – High

• Experience reviewing or tuning governance rules, policies, thresholds, roles, entitlements, workflows, or recommendations
• Ability to improve the quality and operational usefulness of platform findings
• Experience documenting configurations, rule logic, decisions, and governance improvements

Key Responsibilities

• Review and investigate identity governance platform findings involving excessive access, orphaned identities, stale entitlements, policy violations, and identity lifecycle exceptions.
• Evaluate findings, validate access ownership, and recommend appropriate remediation actions.
• Tune governance rules, policies, thresholds, correlation logic, roles, and entitlements to improve platform effectiveness.
• Support access certification campaigns, entitlement reviews, role analysis, segregation‑of‑duties reviews, and exception handling.
• Analyze identity and entitlement relationships across IGA platforms, Active Directory, Microsoft Entra ID, privileged access management systems, business applications, and HR systems.
• Improve identity ownership models, approval requirements, lifecycle controls, and governance standards.
• Identify opportunities to improve joiner/mover/leaver automation, access request workflows, certification processes, and reporting.
• Translate platform findings into remediation tickets, change requests, process improvements, and control enhancements.
• Partner with identity architects, IAM leadership, application owners, security, audit, HR, and business stakeholders.
• Track remediation progress, aging findings, repeat violations, exceptions, and risk acceptance.
• Develop governance metrics and leadership reporting covering access risk, remediation status, and platform adoption.
• Document governance configurations, rule logic, operating procedures, and recommended improvements.
• Evaluate new IGA and identity security posture management capabilities for operational use.

Required Qualifications

• 5+ years of experience in identity governance, access governance, cybersecurity, IAM operations, IT risk, or a related discipline.
• Hands‑on experience with an enterprise IGA platform such as Saviynt, SailPoint, Microsoft Entra ID Governance, or comparable technology.
• Strong understanding of:
• Identity lifecycle management
• Access requests and approvals
• Entitlement and role management
• Access certifications and reviews
• Segregation of duties
• Policy violations and exceptions
• Orphaned identities and stale access
• Experience investigating access risks, validating findings, and coordinating remediation.
• Ability to distinguish meaningful security risks from false positives.
• Experience collaborating with business owners, application owners, approvers, IAM teams, and audit stakeholders.
• Strong analytical, documentation, communication, and stakeholder‑management skills.

Preferred Qualifications

• Hands‑on Saviynt experience involving:
• Identity governance
• Access requests
• Access certifications
• Role and entitlement modeling
• Governance workflows
• Analytics and policy rules
• Reporting
• Experience with SailPoint, Microsoft Entra ID Governance, CyberArk, or BeyondTrust.
• Identity Security Posture Management (ISPM) experience.
• PowerShell, SQL, Python, REST APIs, connectors, or workflow troubleshooting.
• SOX, IT General Controls, NERC CIP, or regulated industry experience.
• Utility or critical infrastructure industry experience.
• Saviynt, SailPoint, Microsoft, CISA, CRISC, CISSP, or CISM certification.

Tools & Technologies

• Saviynt
• SailPoint
• Active Directory
• CyberArk / BeyondTrust
• IGA and ISPM platforms
• Access certification tools
• Entitlement review and role management tools
• PowerShell / SQL / Python
• REST APIs and connectors
• Governance reporting and analytics tools

Additional Notes

• Remote within the United States
• Central Time business hours required
• Candidates must meet applicable U.S. work authorization requirements
• Strong hands‑on Saviynt experience is preferred, but comparable enterprise IGA platform experience may be considered

The role requires active investigation and remediation of governance findings, not simply administration of user accounts