Senior Information Security Analyst / IAM Administrator

Harvey Nash; Frankfort (KY); On-site; USD 80,000 - 110,000; Full time

Job summary

Harvey Nash is seeking an experienced Information Security Analyst & Administrator to join a dynamic security team in Frankfort, KY. The role emphasizes IAM, AD/Entra ID, and enterprise identity management within an enterprise IT operation.

You will implement MFA, SSO, and access controls, administer AD/Entra ID and Okta, and leverage SIEM platforms to monitor security events while guiding risk assessments and compliance efforts.

Qualifications

• Hands-on expertise with Microsoft Active Directory and Microsoft Entra ID.
• Design and implement IAM integrations and provisioning workflows.
• Develop and maintain RBAC frameworks.
• Strong understanding of enterprise identity and authentication models.
• Experience with NIST CSF, ISO 27001, or CIS Controls.
• Demonstrated ability to lead and mentor technical teams.

Responsibilities

• Serve as a primary IT Security SME supporting enterprise security technologies and implementations.
• Design and implement IAM integrations, provisioning workflows, authentication, authorization, and access controls.
• Develop and maintain RBAC frameworks.
• Administer Active Directory, Entra ID, Okta, and privileged access environments.
• Implement MFA, SSO, SAML, OIDC, SCIM, and enterprise identity solutions.
• Monitor and investigate security events using SIEM platforms (Splunk, Sentinel, QRadar).
• Support vulnerability management, risk assessments, security reviews, and incident response.
• Develop and maintain security policies aligned with NIST CSF, ISO 27001, CIS Controls.
• Support security audits, compliance assessments, remediation activities, and third-party reviews.
• Identify security risks and mitigation strategies across technology projects.
• Lead and collaborate with engineering teams and stakeholders.
• Automate security tasks using PowerShell and Python.

Skills

Active Directory

Entra ID

IAM

RBAC

PowerShell

Python

MFA

SIEM

SAML/OIDC

Education

Bachelor's degree in CS/IT/CE

Equivalent professional experience

Tools

Okta

Splunk

Microsoft Sentinel

QRadar

Palo Alto

Fortinet

Cisco

Job description

Hiring: Information Security Analyst & Administrator

Note: Consultant must be flexible and available to attend meetings in Frankfort, KY, whenever required.

We are looking for an experienced Information Security Analyst & Administrator to join a dynamic enterprise security team. This role is ideal for a security professional who combines strong hands-on technical expertise with experience supporting security projects, IAM implementations, and enterprise IT operations.

The ideal candidate will serve as a senior security SME, with a strong focus on Identity & Access Management, Microsoft Active Directory, Microsoft Entra ID, Okta, enterprise authentication, and access control.

Key Responsibilities:

• Serve as a primary IT Security SME supporting enterprise security technologies, processes, and implementations


• Design and implement IAM integrations, provisioning workflows, authentication, authorization, and access controls


• Develop and maintain Role-Based Access Control (RBAC) frameworks


• Administer Active Directory, Microsoft Entra ID, Okta, and privileged access environments


• Implement MFA, SSO, SAML, OIDC, SCIM, and enterprise identity solutions


• Monitor and investigate security events using SIEM platforms such as Splunk, Microsoft Sentinel, and QRadar


• Support vulnerability management, risk assessments, security reviews, and incident response


• Develop and maintain security policies, standards, and procedures aligned with NIST CSF, ISO 27001, and CIS Controls


• Support security audits, compliance assessments, remediation activities, and third-party security reviews


• Identify security risks, issues, dependencies, and mitigation strategies across technology projects


• Lead, mentor, and collaborate with technical engineering teams and cross-functional stakeholders


• Use PowerShell and Python to automate security and identity management tasks

Must-Have Qualifications:

• Deep hands-on expertise with Microsoft Active Directory and Microsoft Entra ID


• Proven experience designing and implementing IAM integrations and provisioning workflows


• Strong experience developing and maintaining RBAC frameworks


• Strong understanding of enterprise identity and authentication models


• Experience with NIST CSF, ISO 27001, or CIS Controls


• Demonstrated ability to lead and mentor technical teams


• Strong communication, analytical, organizational, and problem-solving skills


• Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, or a related discipline, or equivalent professional experience

Preferred Experience:

• Okta, Ping Identity, CyberArk, and other IAM/PAM technologies


• SAML, OIDC, SCIM, and Fine-Grained Authorization (FGA)


• Splunk, Microsoft Sentinel, and IBM QRadar


• Palo Alto, Fortinet, and Cisco security technologies


• CrowdStrike, Microsoft Defender for Endpoint, and Carbon Black


• PowerShell and Python automation


• ServiceNow and IAM integrations


• Security modernization programs within public-sector or large enterprise environments


• Experience supporting compliance requirements such as SOC 2, HIPAA, PCI-DSS, CJIS, or FedRAMP

Certifications such as CISSP, CompTIA Security+, Microsoft Azure Security Engineer (AZ-500), or Microsoft Active Directory credentials are highly valued.

If you are an experienced Information Security professional with strong IAM, Active Directory, Entra ID, and enterprise security experience, we would like to hear from you.