IAM Security Analyst

Company : Compassus

Position Summary

The IAM Security Analyst is responsible for designing, implementing, and maintaining secure identity and access management (IAM) practices across the enterprise. This role contributes to the broader Information Security program, including incident response, audit, compliance, and vulnerability management, while focusing primarily on IAM governance, automation, and system integration. The analyst works independently and collaboratively on moderately complex projects, applying advanced IAM knowledge and technical expertise to strengthen enterprise security.

Position Specific Responsibilities

• Oversee and maintain provisioning and deprovisioning of user accounts and application access.
• Administer and analyze access rights primarily through Microsoft security groups.
• Support and optimize lifecycle management of user identities across Microsoft Active Directory and Azure Active Directory (Entra ID).
• Implement role-based access control (RBAC), least privilege, and segregation of duties principles.
• Conduct ongoing reconciliation between IAM-managed security groups, AD, and HR data source systems to ensure accuracy and compliance.
• Analyze and troubleshoot IAM synchronization jobs, group lifecycle processes, and provisioning tasks.
• Develop and maintain scripts and code to automate identity and access workflows.
• Engineer integrations via JIT, SCIM, and APIs to streamline provisioning and deprovisioning processes.
• Design and maintain automation processes for attribute-based membership, nested groups, and complex access scenarios.
• Create and optimize SQL-based reporting, custom synchronization rules, data extracts, and access analysis.
• Perform data integrity checks and reconciliation between IAM platforms, Active Directory, and HR systems.
• Document system designs, standard operating procedures (SOPs), and group management processes.
• Contribute to automation initiatives by scripting and integrating IAM tools with other security and IT platforms.
• Participate in incident response activities, particularly those involving identity misuse or compromised accounts.
• Support compliance and audit reviews related to access control, synchronization activity, and user activity.
• Provide SQL-based audit reports for group membership, access changes, and IAM automation jobs.
• Contribute to vulnerability management and remediation efforts as they intersect with IAM.
• Partner with IT, HR, and business stakeholders to ensure secure, efficient, and compliant user lifecycle processes.
• Assist in the development of policies and standards related to IAM and access governance.
• Provide subject matter expertise for IAM in security assessments, audits, and new technology initiatives.
• Document and communicate IAM processes and technical procedures to support operational teams and cross-functional projects.
• Other duties as necessary.

Education and / or Experience

Skills

Proficiency in SQL for queries, reporting, and troubleshooting.

Hands-on scripting / coding experience (e.g., PowerShell, Python, or similar) to support automation and API integrations.

Solid understanding of IAM concepts such as authentication, authorization, RBAC, MFA, and identity lifecycle management.

Demonstrated ability to automate IAM workflows and integrate identity platforms with enterprise systems (e.g., SCIM, APIs, SaaS applications).

Experience reconciling data between IAM platforms, HR systems, and Active Directory, ensuring accuracy and compliance.

Physical Demands and Work Environment : The demands of this role necessitate a team member to effectively perform essential functions. Adaptations can be made to accommodate team members with disabilities. Regular standing, walking, and manual dexterity are fundamental, along with the ability to lift and move objects up to 25 pounds. Visual acuity requirements include close and distance vision, color and peripheral vision, depth perception, and the ability to adjust focus. This description provides a general overview and may vary by role and department, capturing the nuanced demands and conditions inherent to positions in our organization.

At Compassus, including all Compassus affiliates, diversity, equity, and inclusion are fundamental to our Pillars of Success. We are committed to creating a fair work environment where our team members feel welcomed, highly valued, and respected. As an equal opportunity employer, all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

#LI-DB1

Build a Rewarding Career with Compassus

At Compassus, we care for our team members as much as we care for our patients and their families. Through our Care for Who I Am culture, we show compassion, respect, and appreciation for every individual. Embark on a career that cares for you while you care for others.

Your Career Journey Matters

We're dedicated to helping you grow and succeed. Whether you're pursuing leadership roles, specialized training, or exploring new career paths, we provide the tools and support you need to thrive.

The Compassus Advantage

Ready to Join?

At Compassus, your career is more than a job-it's an opportunity to make a lasting impact. Take the next step and join a team that empowers you to grow, innovate, and thrive.