Lead IAM Analyst

About the role

We are seeking a detail‑oriented, self‑driven IAM Automation and Governance Specialist to enhance and automate our identity and access management practices. The focus will be on integrating Microsoft Entra ID (Azure AD) with UKG HRIS systems while ensuring compliance with Zero Trust, least‑privilege principles and regulatory standards such as HITRUST, HIPAA, SOC 2 and PCI DSS.

Key responsibilities

• Design, implement and automate Joiner‑Mover‑Leaver (JML) workflows and user lifecycle events in Azure AD.
• Manage entitlement management components including Access Packages, Catalogs, Privileged Identity Management (PIM) and Access Reviews.
• Develop PowerShell scripts (Graph API, AzureAD, MSOnline, Az modules) to export IAM data, query sign‑in logs and automate provisioning tasks.
• Maintain Azure subscriptions, resource groups, RBAC, Intune, Defender for Endpoint and Microsoft 365 Security & Compliance Center.
• Map IAM controls to compliance frameworks (NIST 800‑53, HIPAA, SOC 2, PCI DSS) and support audit evidence collection.

Required profile

• Bachelor’s degree in Computer Science, Information Security or a related field.
• 8–10 years of experience in IAM or IT security, with proven work integrating Microsoft Entra ID with HRIS platforms (preferably UKG).
• Preferred certifications: Microsoft Identity and Access Administrator, CISSP/CISM, Azure Security Engineer Associate.

Required skills

• Microsoft Entra ID (Azure AD) administration and entitlement management.
• PowerShell scripting, including Graph API, AzureAD, MSOnline and Az modules.
• Privileged Identity Management, Access Reviews and Conditional Access configuration.
• Azure RBAC, subscription and resource‑group management.
• Intune, Defender for Endpoint, and Microsoft 365 Security & Compliance Center.