Senior Identity Security Analyst

Janus Henderson Group; Denver, Northern (CO, KY); Hybrid; USD 100,000 - 105,000; Full time

Benefits offered by this job

Hybrid work

Health benefits

Volunteer time

Professional development

Parental leave

Employee events

Happy hours

Job summary

Janus Henderson Investors is seeking a Senior Identity Security Analyst to lead day-to-day IAM operations, manage JML workflows, and administer AD and Entra ID while enforcing security standards. The role collaborates with IAM Engineering, Security Ops, Audit, Risk, and HR to strengthen controls and support audits.

The successful candidate will drive process improvements, governance, and automation, while contributing to a mature Identity Security program in a hybrid Denver environment.

Qualifications

• Proven experience executing day‑to‑day Identity Security operations, including Joiner/Mover/Leaver (JML) processing, access requests, and ticket‑based workflows in an enterprise environment.
• Strong hands‑on experience administering and maintaining Active Directory and Microsoft Entra ID, including account lifecycle management, group and role management, and directory hygiene activities.
• Experience maintaining and enforcing Identity Security standards, procedures, and controls, including directory hygiene, lifecycle governance, and compliance requirements.
• Demonstrated ability to manage multiple concurrent tasks, meet deadlines consistently, and proactively communicate risks or delays in a fast‑paced operational environment.
• Experience monitoring and responding to identity‑related security alerts (e.g., Netwrix or similar tools), performing initial analysis, remediation, or escalation as appropriate.
• Experience supporting PAM processes, including privileged account onboarding, maintenance, hygiene cleanup, and least‑privilege enforcement.
• Ability to support internal and external audits by providing evidence, responding to inquiries, and remediating identity‑related findings in regulated environments.
• Experience working within a ticket queue model (ServiceNow or equivalent), adhering to SLAs, documenting work accurately, and maintaining operational reliability .
• Carry out other duties as assigned

Responsibilities

• Manage day-to-day Identity Security operations including JML processing, access requests, and ticketing workflows.
• Administer Active Directory and Microsoft Entra ID lifecycles and hygiene.
• Enforce Identity Security standards, lifecycle governance, and compliance controls.
• Monitor identity-related security alerts and perform initial remediation or escalation.
• Support PAM onboarding, maintenance, hygiene cleanup, and least-privilege enforcement.
• Assist audits with evidence and responses to inquiries in regulated environments.
• Work in a ticketing environment (ServiceNow) following SLAs and documenting work.
• Identify opportunities to standardize or automate processes to improve efficiency.

Skills

Identity security operations

JML processing

AD/Microsoft Entra ID

Access requests

PAM

Security alerts

Auditing

Ticketing (ServiceNow)

Tools

SailPoint ISC

Identity IQ

Netwrix

CyberArk

Delinea

Britive

Job description

Select how often (in days) to receive an alert:

A career at Janus Henderson is more than a job, it’s about investing in a brighter future together .

Our Mission at Janus Henderson is to help clients define and achieve superior financial outcomes through differentiated insights, disciplined investments, and world-class service. We will do this by protecting and growing our core business, amplifying our strengths and diversifying where we have the right.

Our Values are key to driving our success, and are at the heart of everything we do:

Clients Come First - Always | Execution Supersedes Intention | Together We Win | Diversity Improves Results | Truth Builds Trust

If our mission, values, and purpose align with your own, we would love to hear from you!

Your opportunity

The Senior Identity Security Analyst is responsible for the day‑to‑day operations, continuous improvement of Identity Security services. This hands‑on role supports Joiner, Mover, and Leaver (JML) processes, access requests, Active Directory and Microsoft Entra ID administration, Privileged Access Management (PAM), identity‑related security alerts, and audit activities. The individual is accountable for maintaining identity platform integrity through directory hygiene, lifecycle governance, enforcement of Identity Security standards, and remediation of dormant, orphaned, duplicate, and non‑compliance accounts, groups, roles and other identity objects.

The role partners closely with IAM Engineering, Infrastructure, Security Operations, Audit, Risk, and the People Team to ensure identity processes remain effective, auditable, and aligned to least‑privilege and Zero Trust principles. Senior Analysts are expected to identify opportunities to improve processes through standardization, automation, analytics, and responsible use of AI‑enabled technologies while maintaining a strong understanding of Identity Security and broader cybersecurity concepts. The successful candidate will proactively identify risk, improve operational efficiency, support audit readiness, and contribute to the continued maturity of the Identity Security Program.

What to expect when you join our firm

• Hybrid working and reasonable accommodations
• Excellent Health and Wellbeing benefits including corporate membership to Wellhub
• Paid volunteer time to step away from your desk and into the community
• Support to grow through professional development courses, tuition/qualification reimbursement and more
• Maternal/paternal leave benefits and family services
• Unique employee events and programs including a 14er challenge
• Complimentary beverages, snacks and all employee Happy Hours

Must have skills

• Proven experience executing day‑to‑day Identity Security operations, including Joiner/Mover/Leaver (JML) processing, access requests, and ticket‑based workflows in an enterprise environment.
• Strong hands‑on experience administering and maintaining Active Directory and Microsoft Entra ID, including account lifecycle management, group and role management, and directory hygiene activities.
• Experience maintaining and enforcing Identity Security standards, procedures, and controls, including directory hygiene, lifecycle governance, and compliance requirements.
• Demonstrated ability to manage multiple concurrent tasks, meet deadlines consistently, and proactively communicate risks or delays in a fast‑paced operational environment.
• Experience monitoring and responding to identity‑related security alerts (e.g., Netwrix or similar tools), performing initial analysis, remediation, or escalation as appropriate.
• Experience supporting PAM processes, including privileged account onboarding, maintenance, hygiene cleanup, and least‑privilege enforcement.
• Ability to support internal and external audits by providing evidence, responding to inquiries, and remediating identity‑related findings in regulated environments.
• Experience working within a ticket queue model (ServiceNow or equivalent), adhering to SLAs, documenting work accurately, and maintaining operational reliability .
• Carry out other duties as assigned

Nice to have skills

• Hands‑on experience with SailPoint ISC, Identity IQ(or similar IGA platforms) for identity lifecycle management, access governance, or entitlement cleanup.
• Experience identifying manual IAM processes and contributing to improvements, standardization, or automation initiatives.
• Familiarity with Netwrix, identity analytics, or directory monitoring tools beyond basic alert triage.
• Experience working in environments subject to SOX, SOC, ISO, or similar regulatory requirements.
• Familiarity with cloud identity and access management concepts, including federations, SSO, MFA, and conditional access.
• Experience with CyberArk, Britive, Delinea, or comparable PAM solutions.
• Experience partnering with Infrastructure, Security Operations, HR, and Audit teams to drive cross‑functional identity initiatives.
• Basic scripting or technical skills (e.g., PowerShell) to assist with reporting, cleanup, or operational efficiency.

Supervisory responsibilities

• No

Potential for growth

• Regular training
• Continuing education courses

Compensation information

The base salary range for this position is $100,000-$105,000. This range is estimated for this role. Actual pay may be different. This position will be open through September 30, 2026.

Colorado law requires an estimated closing date for job postings. Please don't be discouraged from applying if you see this date has passed.

At Janus Henderson Investors we’re committed to an inclusive and supportive environment. We believe diversity improves results and we welcome applications from candidates from all backgrounds. Don’t worry if you don’t think you tick every box, we still want to hear from you! We understand everyone has different commitments and while we can’t accommodate every flexible working request, we’re happy to be asked about work flexibility and our hybrid working environment. If you need any reasonable accommodations during our recruitment process, please get in touch and let us know at [e-mail] .

#LI-LN2 #LI-Hybrid

Annual Bonus Opportunity:

Position may be eligible to receive an annual discretionary bonus award from the profit pool. The profit pool is funded based on Company profits. Individual bonuses are determined based on Company, department, team and individual performance.

Benefits:

Janus Henderson is committed to offering a comprehensive total rewards package to eligible employees that includes; competitive compensation, pension/retirement plans, and various health, wellbeing and lifestyle benefits. To learn more about our offerings please visit the Why Join Us section on the career pagehere .

Janus Henderson Investors is an equal opportunity employer.All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. All applications are subject to background checks.

Janus Henderson (including its subsidiaries) will not maintain existing or sponsor new industry registrations or licenses where not supported by an employee’s job functions (as determined by Janus Henderson at its sole discretion).

You should be willing to adhere to the provisions of our Investment Advisory Code of Ethics related to personal securities activities and other disclosure and certification requirements, including past political contributions and political activities. Applicants’ past political contributions or activity may impact applicants’ eligibility for this position.

You will be expected to understand the regulatory obligations of the firm, and abide by the regulated entity requirements and JHI policies applicable for your role.