IT Access Management Analyst
Summary
The IT Access Management Analyst manages user access lifecycles, including Joiners, Movers, and Leavers (JML) processes, using SailPoint IdentityIQ. The role involves monitoring IAM systems, troubleshooting provisioning failures, and ensuring compliance with security policies through MS SQL data manipulation and operational support.
Joiners, Movers, Leavers (JML) Processing
- Execute and monitor JML workflows to ensure timely provisioning, modification, and de-provisioning of user access in line with HR events and business requests.
- Investigate and resolve exceptions, failures, or delays in JML processing.
Role and Entitlement Management
- Maintain and administer role definitions, access profiles, and entitlements within the IAM platform.
- Support periodic access reviews, role mining, and entitlement clean-up activities.
- Process access requests, approvals, and changes in line with defined policies and SLAs.
IAM Monitoring and Operations
- Monitor IAM events, scheduled jobs, batch tasks, and system logs to ensure processes complete successfully.
- Identify, triage, and remediate failed or stuck tasks, aggregation jobs, and provisioning events.
- Perform manual workarounds and interim fixes where automated processes fail, while escalating root causes for permanent resolution.
- Maintain operational runbooks and document recurring issues and resolutions.
Tooling and Technical Support
- Operate and maintain SailPoint IdentityIQ (IIQ) configurations, workflows, and connectors supporting IAM processes.
- Query and manipulate data in MS SQL databases to investigate issues, validate data integrity, and support reporting
- Work with engineering and platform teams to escalate defects, test fixes, and support upgrades or enhancements.
Governance and Compliance
- Ensure IAM activities are performed in compliance with internal policies, audit requirements, and regulatory expectations.
- Support internal and external audits by providing evidence, logs, and process documentation.
Skillset Requirements:
- Minimum 2 years of experience in an IAM operations, identity administration, or access management role.
- Hands-on working knowledge of SailPoint IdentityIQ (IIQ) which includes workflows, certifications, provisioning, and connectors is strongly preferred.
- Proficiency in MS SQL (querying, troubleshooting, data validation), scripting or automation experience is advantageous.
- Solid understanding of JML lifecycle processes, role-based access control (RBAC), and entitlement management concepts.
- Experience in monitoring scheduled jobs/batch processes and diagnosing failures in an enterprise environment.
- Strong analytical and troubleshooting skills with a methodical, detail-oriented approach.
- Ability to work independently under time pressure, including managing urgent access issues.
- Good communication skill, with the ability to document processes clearly and liaise with technical and business stakeholders.
- Good team player, agile, fast learner, and able to adapt to changes.