IT Access Administrator

ORNL Federal Credit Union; United States; On-site; USD 65,000 - 92,000; Full time

Job summary

ORNL Federal Credit Union is seeking an IT Access Administrator to join our corporate IT team in Oak Ridge, TN. This role focuses on monitoring application access, enforcing least privilege, and supporting IAM/PAM tooling and access reviews.

You will collaborate across IT to communicate incidents, changes, and security policies, maintain procedures, and ensure accurate entitlement revalidations while coordinating with business lines and external partners.

Qualifications

• 3+ years in IT access administration and IAM.
• 1+ year evaluating access levels for core applications with RBAC.
• Experience with ticketing systems, access workflows, and SLAs.
• 1 year in a financial institution preferred.
• Experience with audits, entitlement revalidations, or compliance.
• Experience with AD/Entra ID or similar access control tech.
• Experience developing procedures and documentation for access administration.

Responsibilities

• Perform access account administration for business lines and partners, following IAM and PAM.
• Support incident communications and change messaging across IT teams.
• Maintain department project lists, coordinate with vendors, and manage testing schedules.
• Develop and maintain procedures and documentation for access management and entitlement reviews.

Skills

Identity and Access Management

Privileged Access Management

Least privilege

Incident communications

Education

High school diploma or GED

Bachelor's degree in Computer Science or related field

Tools

Active Directory

Microsoft Entra ID/Azure AD

Ticketing systems

Certificate and token management tools

Job description

Description

This position is based at our Corporate Headquarters in Oak Ridge, TN (221 S. Rutgers Avenue).

The IT Access Administrator supports the monitoring of application access, assists with the implementation and maintenance of system tools, and helps maintain IT-related policies and procedures to ensure accuracy and mitigate risk for ORNL Federal Credit Union. This position assists with IT communication within the organization and across IT teams to help ensure clarity, alignment, and timely updates on incidents, initiatives, policies, and system changes.

Essential Functions & Responsibilities

• Performs access account administration tasks for business lines, external partners, senior management, and internal customers, including privilege requests and password management, in alignment with Identity and Access Management (IAM) and Privileged Access Management (PAM) principles. Duties include applying least privilege, supporting identity lifecycle activities (onboarding, role changes, and offboarding), and following secure credential handling practices for privileged accounts. Assists project teams by helping verify that access entitlement controls, segregation of duties, and compliance requirements are implemented and maintained. Supports the deployment, configuration, and optimization of IAM and PAM tools, participates in periodic and ongoing access reviews, and helps ensure adherence to regulatory and security standards.
• Supports IT communication within the organization, with external entities, and across IT teams to promote clarity, alignment, and timely updates. Assists in delivering accurate and consistent messaging during incidents to help minimize business impact, communicating planned system changes and maintenance windows, and sharing updates on IT policies and procedures. Acts as a liaison for IT projects as assigned by providing progress updates and basic impact information, and helps foster collaboration among IT teams through regular updates and documentation. During crisis or recovery events, assists in providing prompt and transparent communication of escalation protocols and recovery status to stakeholders.
• Maintains a department-level project list and coordinates with vendors, equipment, and supplies as directed. Helps develop schedules for system testing activities and coordinates participation and attendance with key stakeholders. Works within the ticketing systems to ensure tickets are addressed in a timely manner. Performs operational tasks for certificate and token management and provides timely and clear communications to stakeholders related to technical changes, projects, and system testing.
• Develops and/or maintains written procedures and “How to” documentation to support access management functions and application access administration. Maintains and updates the Staff List, Role Templates, and Policy Templates, coordinating with appropriate business lines for annual reviews. Supports periodic entitlement revalidations to confirm that staff have appropriate access and entitlements.

Work Experience

• Minimum of 3 years of experience in IT access administration, identity and access management is required
• Minimum of 1 year experience reviewing and providing recommended access levels for core business applications or enterprise platforms, including role-based access control is required
• Experience working with ticketing systems, access request workflows, and documented service level expectations is required
• 1 year of experience working in a financial institution is preferred
• Experience supporting audits, access reviews, entitlement revalidations, or compliance-related activities within a regulated environment is preferred
• Experience with Identity and Access Management (IAM), Privileged Access Management (PAM), Active Directory, Microsoft Entra ID/Azure AD, or similar access control technologies is preferred
• Experience developing or maintaining procedures, role templates, and process documentation related to access administration is preferred
• Experience supporting change management, incident communications, or cross-functional IT coordination in a business environment is preferred

Education

• A high school diploma or GED is required.
• A Bachelors degree in Computer Science, Management, Education, Information Technology, Technical Administration, Business, Information Systems, or in a related field is preferred.

Other skills required

• Proficiency in Microsoft 365.
• Experience supporting multiple users/stakeholders.
• Knowledge of entitlements, groups, and role configuration.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.