Information Security Analyst II - Identity Management

Cybersecurity Jobs; Tredyffrin Township (Chester County); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Challenging environment

Growth opportunities within UHS andits

Competitive Compensation

Medical, Dental, Vision plans

401k with company match

Generous PTO

Job summary

UHS is seeking a seasoned Identity Governance and Access Management professional to support and optimize IGA/IAM capabilities across lifecycle workflows, RBAC, and entitlement management. You will partner with multiple stakeholders to streamline onboarding and access controls, while mentoring junior staff.

Required are a Bachelor’s degree and 3–5 years in information security or IAM, with hands-on AD/Entra ID, SIEM, and DLP tooling experience to protect data and enable compliant access

Qualifications

• Bachelor's degree in a related field is required.
• 3–5 years of experience in information security, IAM, or related areas.
• Working knowledge of IGA/IAM concepts and RBAC.
• Experience with AD/Entra ID and enterprise security controls.

Responsibilities

• Support implementation, administration, and operation of IGA and IAM capabilities.
• Manage identity lifecycle workflows including provisioning and deprovisioning.
• Administer RBAC, access governance, and entitlement management.
• Analyze identity data to detect inappropriate or excessive access.
• Identify opportunities to strengthen governance through automation and joiner/mover/leaver processes.
• Collaborate with engineering, cybersecurity, HR, compliance, and owners on onboarding and access controls.
• Serve as SME for at least one technology/process and mentor junior staff.
• Monitor maintenance/enhancement issues for the UHS Customer Support Center.

Skills

IGA concepts

RBAC

SOX

HIPAA

NIST

PowerShell

SIEM

Cloud security

Education

Bachelor's degree

Tools

Active Directory

Entra ID

SIEM

Vulnerability scanning

DLP tooling

Job description

Drive identity governance and access management operations, from lifecycle workflows to access controls and application onboarding.

Responsibilities

• Support implementation, administration, and ongoing operation of Identity Governance and Administration (IGA) and Identity and Access Management (IAM) capabilities.
• Manage identity lifecycle workflows, including provisioning and deprovisioning, access requests, access certifications/reviews, and entitlement management.
• Administer role-based access control (RBAC), including access governance and role/access models.
• Analyze identity and access data, processes, workflows, and controls to detect and remediate inappropriate, excessive, orphaned, or unnecessary access.
• Identify opportunities to strengthen identity governance through improved controls, automation, and better joiner/mover/leaver processes.
• Collaborate with Identity Engineering, Cybersecurity, HR, Compliance, application owners, and business stakeholders on onboarding, access workflows, and access controls.
• Serve as a subject matter expert (SME) for at least one technology or process and provide technical support and guidance to team members.
• May oversee efforts of junior staff supporting the assigned technology or process.
• Monitor resolution of maintenance or enhancement issues assigned by the UHS Customer Support Center.
• Perform other duties as assigned or required.

Requirements

• Bachelor's degree required.
• Minimum 3-5 years of experience in information security, identity and access management (IAM), identity governance, or related disciplines.
• Working knowledge of IGA and IAM concepts, including:
  • Identity lifecycle management and joiner/mover/leaver processes
  • Provisioning and deprovisioning
  • Access requests and access certifications/reviews
  • Entitlement management
  • Role-based access control (RBAC)
• Experience configuring, managing, and supporting enterprise identity platforms such as Microsoft Active Directory and Entra ID (or comparable platforms).
• Experience supporting security capabilities including:
  • Anti-malware protections and analysis
  • Web filtering and security
  • Vulnerability scanning and management
  • Encryption technologies for data at rest and data in transit
  • Mobile device and removable media protection or management systems
  • Authentication including SSO and MFA
  • Cloud application security
  • SIEM systems
  • Interpreting CVE data
  • Device control
  • Data Loss Prevention (DLP)
  • Forensic analysis
• Familiarity with HR/HRIS or ERP-driven identity lifecycle processes and authoritative identity sources used for automated provisioning and deprovisioning.
• Working knowledge of regulatory security requirements, particularly Sarbanes-Oxley (SOX), HIPAA, and HITECH.
• Working knowledge of security frameworks such as HITRUST and NIST (or others).
• Ability to prioritize multiple tasks and be detail oriented.
• Excellent communication, interpersonal, and project management skills.
• Travel to field locations may be necessary to complete assigned projects.

Technologies

• Microsoft Active Directory
• Entra ID
• SSO
• MFA
• SIEM
• CVE
• PowerShell
• APIs
• Scripting
• Data Loss Prevention (DLP)
• Encryption technologies for data at rest and data in transit
• Anti-malware protections
• Web filtering and security
• Vulnerability scanning and management
• Mobile device and removable media protection or management systems
• Cloud application security
• Authentication
• Device control
• Forensic analysis
• HRIS
• ERP
• HITRUST
• NIST
• Sarbanes-Oxley (SOX)
• HIPAA
• HITECH

Benefits

• Challenging and rewarding work environment
• Growth and development opportunities within UHS and its subsidiaries
• Competitive Compensation
• Excellent Medical, Dental, Vision and Prescription Drug Plan
• 401k plan with company match
• Generous Paid Time Off

Preferred / Plus Qualifications

• Degree in Information Systems, Cybersecurity and Risk Management, Computer Science, or related field preferred.
• Experience with PowerShell, APIs, scripting, workflow automation, or identity system integrations is a plus.
• An information security certification is a plus.

Location: Tredyffrin, PA (onsite)

EEO Statement

UHS subsidiaries are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates.

UHS subsidiaries are equal opportunity employers.

UHS is a registered trademark of UHS of Delaware, Inc. (boilerplate legal/ownership statement).