Senior IT Security Analyst

Responsibilities: Design, implement, and maintain enterprise Identity and Access Management (IAM) solutions for workforce, privileged, and application identitiesIntegrate, administer, and optimize enterprise IAM platformsDefine IAM architecture standards, design patterns, and technical roadmaps aligned to business and security objectivesBuild scalable identity solutions supporting cloud-first and hybrid environmentsAssess emerging IAM technologies and industry best practices to strengthen security postureLead programs across Identity Governance and Administration (IGA), Access Management, Privileged Access Management (PAM), Identity Threat Detection and Response (ITDR), and Zero TrustDesign and implement identity lifecycle management including provisioning, deprovisioning, role management, and access certification activitiesDevelop and maintain authorization models using RBAC, ABAC, and PBACSupport segregation of duties (SoD), least privilege, just-in-time access, and privileged account governance programsAdminister and enhance authentication services such as SSO, MFA, passwordless authentication, federation, and conditional accessManage on-premise, cloud, and hybrid identity environmentsConfigure Identity Protection policies and Conditional Access controls, including risk-based authentication and adaptive access capabilitiesDesign and maintain integrations between identity platforms, cloud services, and business applications using APIs, provisioning connectors, and automation frameworksImplement secure identity integrations for Microsoft Azure, AWS, and Google Cloud Platform and associated enterprise apps and SaaSPartner with application owners and development teams to ensure consistent authentication and authorization controlsSupport application onboarding, federation, provisioning, and access governance activitiesDevelop automation solutions using PowerShell, Python, SQL, Power Automate, or similar tools to reduce manual effort and improve efficiencyCreate and maintain technical documentation, architecture diagrams, operational procedures, and support runbooksRecommend and implement process improvements that enhance security, user experience, and operational effectivenessAct as a senior IAM subject matter expert and trusted advisor to Information Security, IT, Audit, Compliance, and business stakeholdersLead technical projects from planning and design through deployment and operational transitionMentor junior employees and provide technical guidance across IAM initiativesSupport audit, compliance, and regulatory activities by implementing controls and providing required evidenceParticipate in identity-related incident response and root cause investigationsStay current on IAM threats, technologies, and industry trendsPerform other duties as assignedRequirementsAdvanced knowledge of IAM, including IGA, PAM, authentication, authorization, and identity lifecycle managementStrong understanding of modern identity security, including Zero Trust, least privilege, adaptive authentication, risk-based access controls, continuous access evaluation, and ITDRAdvanced knowledge of on-premise, cloud, and hybrid identity environmentsStrong understanding of authentication, federation, and directory protocols: SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, Kerberos, RADIUS, SCIMKnowledge of access control frameworks: RBAC, ABAC, PBACStrong analytical and problem-solving skills to diagnose and resolve complex technical issuesExcellent verbal and written communication skills for technical and non-technical audiencesStrong organizational and project leadership skills; ability to manage multiple prioritiesDemonstrated ability to influence stakeholders and collaborate across cross-functional teamsAbility to develop and maintain technical documentation, standards, procedures, and operational runbooksTechnologiesIdentity and Access Management (IAM), Identity Governance and Administration (IGA), Privileged Access Management (PAM), Identity Threat Detection and Response (ITDR) Zero Trust, RBAC, ABAC, PBACSSO, MFA, passwordless authentication, Conditional Access, Identity Protection policiesAPIs, provisioning connectorsPowerShell, Python, SQL, Power AutomateMicrosoft Azure, AWS, Google Cloud PlatformSAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, Kerberos, RADIUS, SCIMBenefitsMedical with multiple plan optionsShort and long-term disability and life insuranceHealth savings and flexible spending accountsGenerous time off: 3 weeks paid vacation, 7 days paid sick time, 12 paid holidays8 hours of paid volunteer time off8 weeks of paid parental leave for both parentsCompany matched 401(k) Tuition reimbursementExpanded mental health coverage and employee assistance programsVoluntary benefits: critical illness, accident and hospital indemnity, pet insurance, identity theft, and legal assistanceWork EnvironmentOn-site in Denver, Colorado at Corporate HeadquartersStandard office environmentPreferred QualificationsKnowledge of regulatory and compliance frameworks: SOX, NIST, ISO 27001, and CIS ControlsFamiliarity with IT and Security platforms or applications within Customer Relationship Management (CRM), Zero Trust, and other enterprise product familiesUnderstanding of cloud security architectures across Azure, AWS, and Google Cloud PlatformExperienceSeven (7) or more years in Identity and Access Management, Cybersecurity Engineering, Information Security, or a related technical disciplineFive (5) or more years administering and supporting enterprise IAM platforms and access management processesThree (3) or more years supporting on-premise, cloud, and/or hybrid identity directory services in a medium to large enterprise environmentExperience implementing and supporting IGA and PAM solutionsExperience administering enterprise authentication solutions including SSO, MFA, federation services, and conditional access policiesExperience integrating identity platforms with cloud providers, enterprise applications, and SaaS solutionsExperience designing and implementing user provisioning, deprovisioning, access reviews, role management, and access certification processesExperience developing automation solutions using PowerShell, Python, SQL, Power Automate, or similar technologiesExperience leading technical projects from planning and design through implementation and operational supportExperience collaborating with Information Security, Infrastructure, Application Development, Audit, and business stakeholders to deliver IAM solutionsPreferred ExperienceExperience with IAM platforms and technologiesExperience supporting global or manufacturing organizationsExperience supporting regulatory audits, compliance initiatives, and remediation activitiesExperience implementing Zero Trust, PAM, or enterprise IAM modernization programsPreferred CertificationsMicrosoft Certified: Identity and Access Administrator Associate (SC-300) Microsoft Certified: Cybersecurity Architect Expert (SC-100) Certified Information Systems Security Professional (CISSP) Certified Identity and Access Manager (CIAM) Certified Identity Management Professional (CIMP) Additional cloud, cybersecurity, or identity management certifications relevant to the roleEducationBachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related field; or an equivalent combination of education and experience