Technical Business Analyst - Identity & Access Management (IAM)
Summary
A Technical Business Analyst specializing in Identity & Access Management (IAM) and Role-Based Access Control (RBAC) who bridges business needs with technical teams to define security policies, access models, and non-functional requirements for large-scale digital transformation projects.
This role will suit a technically strong BA who can operate between business, architecture, development, security and QA teams, with particular responsibility for role-based access control (RBAC), non-functional requirements (NFRs), security requirements and user access management.
Key responsibilities will include:
- Define and document Identity & Access Management requirements, including RBAC, security policies, permissions and security mapping.
- Gather, review and refine non-functional requirements (NFRs) across security, performance, scalability, reliability and availability.
- Translate high-level business requirements into measurable and testable technical requirements.
- Perform gap analysis across solution design and implementation to identify security, performance and availability risks.
- Define cybersecurity requirements covering authentication, authorisation, encryption and security controls.
- Establish requirements for penetration testing, High Availability and Disaster Recovery, including RTO and RPO.
- Maintain traceability between NFRs, solution designs, development activities and testing.
- Work closely with QA teams to ensure NFRs are mapped to performance, load, security and UAT test scenarios.
- Analyse requirements and develop clear user stories and acceptance criteria.
- Support user onboarding, access requests, role administration and broader user management requirements.
- Facilitate requirements workshops, walkthroughs and clarification sessions with technical and business stakeholders.
- Work closely with Solution Architects, developers, QA, Product Owners and project leadership to resolve ambiguity and drive delivery.
- Manage analysis activities against project milestones, dependencies and risks.
- 5+ years' experience as a Technical Business Analyst, ideally specialising in non-functional requirements.
- Strong hands-on experience with Identity & Access Management (IAM) and Role-Based Access Control (RBAC).
- Experience defining authentication, authorisation, roles, permissions and access models.
- Strong understanding of non-functional requirements, particularly security, performance, scalability, availability and reliability.
- Experience delivering large-scale digital transformation or system implementation projects.
- Strong user story and acceptance criteria writing skills.
- Experience working across both Agile and Waterfall delivery environments.
- Strong workshop facilitation and stakeholder management capabilities.
- Ability to confidently engage with architects, developers, testers and senior business stakeholders.
- Experience working with APIs, Microsoft SQL and SQL Stored Procedures.
- Experience with Atlassian products and Microsoft 365.
- Previous experience working with software vendors and technology providers.
- Recent exposure to event modelling and event-driven solutions will be highly regarded.
- Experience with AWS AVP (Amazon Verified Permissions) and fine-grained, policy-based authorisation would be highly advantageous.
Please call Patrick Egan @ TalentWeb on 0407 261 441 for a confidential discussion or just hit the apply button below.