Security Analyst - Identity Access Management (Salaried, Full time)

Washington Regional; Fayetteville (NC); On-site; USD 90,000 - 120,000; Full time

Job summary

Washington Regional seeks a Security Analyst - Identity Access Management to design and operate access controls across on-premises and cloud environments in Fayetteville, NC.

You will implement IAM governance, manage SSO, MFA, RBAC, and ensure regulatory compliance while collaborating with IT and business units. This role reports to Information Security Manager and requires 3+ years in IAM.

Qualifications

• Bachelor's degree in computer science, engineering, information assurance or related field.
• Minimum 3 years' experience with directory services, Windows, and Azure AD, SSO, MFA and RBAC.
• Experience with regulatory requirements such as PCI, FFIEC, SOX, HIPAA, GDPR and GLBA.
• Preferred: ISO 17799, ITIL and NIST.

Responsibilities

• Establish and maintain access to systems and applications.
• Collaborate with internal and external clients on IAM needs.
• Support IAM governance, policies, and solutions across SSO, MFA, privileged accounts.
• Audit internal, external, and contractor accounts as part of periodic audits.
• Monitor performance and drive automation for IAM controls.

Skills

IAM

RBAC

SSO

MFA

Education

Bachelor's degree in computer science, engineering, information assurance or related field

Tools

Azure AD

Active Directory

Windows Server

Job description

Education LevelGraduate DegreeOur mission is to improve the health of people in the communities we serve through compassionate, high-quality care, prevention, and wellness education is a community-owned, locally governed, non-profit health care system located in in the heart of Fayetteville, which is consistently ranked among the Best Places to live in the country. Our 425-bed medical center has been named the for five consecutive years by U.S. News & World Report. We employ 3,200+ team members and serve the region with over 40 clinic locations, the region's only Level II trauma center, and five Centers of Excellence - the;;;; and. The role of the Security Analyst - Identity Access Management reports to the Information Security Manager. This position is responsible for establishing and maintaining access to systems and applications. This position will collaborate with internal and external clients to ensure the security needs of the organization are maintained.* Serve on a distributed security and technology team responsible for establishing and maintaining identities and entitlements within IAM solutions* Implement identity controls and settings that align with policies and governance structure* Collaborate with internal and external clients to evaluate and implement access models that align with organizational risk posture* Support IAM governance, policies, and solutions across SSO, directory, certificate, MFA, privileged accounts, automation, and behavior analytics systems* Assess and resolve IAM issues that occur across the employee base, as well as with external entities* Secure access to both on-premises and cloud infrastructure, as well as to applications required to support a distributed remote workforce* Evaluate business impact and risk exposure based on the level of access granted and make recommendations where improvements should be made* Partner with appropriate personnel regarding incidents and escalate to management, as needed* Document access, policies, and exceptions, and maintain integrity for audit reviews* Review internal, external and contractor accounts as part of periodic audits* Continuously monitor for performance optimization strategies and report findings to leadership regarding for improvements in automation efficiencies, security practices and end-user experience* Collect key performance indicators and related operational metrics, and track SLAs used to validate success as well as future areas of improvement* Execute tactical requests and support the strategic vision for rigorous and scalable IAM controls* Maintain understanding of business processes to aid in managing enterprise identity and access* Continuously interact with business units to understand their plans, risk posture and tolerance, and how IAM supports their vision and business obligations with security in mind* Implement IAM projects from inception to completion meeting deadlines and budgetary thresholds**Education**: Bachelor's degree in computer science, engineering, information assurance or related field, preferred. **Experience**: Minimum 3 years' experience with directory services, Windows, and Azure AD, SSO, MFA and role-based access control (RBAC). Experience with one or more regulatory requirements and laws such as, but not limited to, PCI, Federal Financial Institutions Examination Council (FFIEC), Sarbanes-Oxley (SOX), HIPAA, GDPR and GLBA, required. Experience in one or more of the following preferred: ISO 17799, ITIL and NIST, required.