Business Analyst For Active Directory Solution with PowerShell

job summary:
Our enterprise client has an immediate opening for an experienced Business Analyst to help craft an enterprise solution in Active Directory and utilizing their PowerShell experience.

In this role, you'll work directly with corporate end users to define AD groups while using Excel to manage and structure access data. Deep familiarity with AD support and data analysis is essential as well as PowerShell.

 
location: Edison, New Jersey
job type: Contract
salary: $50 - 75 per hour
work hours: 9am to 5pm
education: Associates

responsibilities:

The Business Analyst - Active Directory & Powershell serves as the liaison between business stakeholders, Information Security, IAM engineering, application owners, and IT support teams. This role analyzes identity and access management processes, with a strong focus on Microsoft Active Directory, access provisioning, role and group management, and user lifecycle controls.

The position combines traditional business analysis responsibilities with hands-on technical analysis using PowerShell, Active Directory reporting tools, and structured data. The analyst will identify process gaps, analyze access and group membership data, develop requirements, support remediation initiatives, and automate recurring analysis and reporting activities.

The ideal candidate has a strong understanding of Active Directory structures, access governance, business process analysis, and data-driven problem solving.

Key Responsibilities

Business and Process Analysis

• Partner with IAM, Information Security, Infrastructure, Human Resources, application owners, and business stakeholders to document active directory groups and access management requirements.
• Analyze current-state IAM processes, including onboarding, transfers, terminations, access requests, approvals, provisioning, deprovisioning, and periodic access reviews.
• Develop current-state and future-state process maps, business requirements, functional requirements, user stories, acceptance criteria, and workflow documentation.
• Identify process gaps, control weaknesses, approval delays, manual dependencies, and opportunities for automation.
• Facilitate requirements-gathering sessions, stakeholder interviews, working sessions, and process reviews.
• Maintain project documentation, decision logs, requirements traceability, action items, and implementation status.

Active Directory Analysis

• Perform detailed analysis of Active Directory users, groups, organizational units, group memberships, nested groups, ownership, and access relationships.
• Identify inactive accounts, orphaned accounts, duplicate access, excessive permissions, unmanaged groups, stale memberships, and groups without valid owners.
• Analyze security groups, distribution groups, privileged groups, service accounts, shared accounts, and role-based access structures.
• Support Active Directory cleanup, access certification, entitlement rationalization, group ownership validation, and remediation initiatives.
• Compare requested, approved, provisioned, and removed access to identify discrepancies.
• Analyze user access based on department, title, manager, location, employment status, start date, termination date, and job function.
• Assist with the development and validation of role-based access control and birthright-access models.
• Support investigations involving access provisioning failures, inappropriate permissions, delayed onboarding, and incomplete deprovisioning.

PowerShell and Python Automation

• Develop and maintain PowerShell scripts to query and analyze Active Directory objects, attributes, memberships, ownership, and account status.
• Possibly use Python to clean, transform, compare, reconcile, and analyze IAM and Active Directory datasets.
• Automate recurring reports, data-quality checks, exception identification, access comparisons, and remediation tracking.
• Extract and consolidate information from Active Directory, IAM platforms, ServiceNow, CSV files, Excel workbooks, databases, and other approved sources.
• Build reusable scripts and analytical tools with appropriate logging, error handling, validation, and documentation.
• Produce structured outputs for operational teams, auditors, control owners, and senior management.
• Work with technical teams to transition approved scripts and analysis routines into controlled production processes.
• Follow organizational standards for source control, code review, testing, security, and change management.

IAM Governance and Controls

• Support access reviews, recertification campaigns, segregation-of-duties analysis, privileged-access reviews, and audit remediation.
• Validate that access requests follow established approval, authorization, and provisioning requirements.
• Assist in defining IAM policies, procedures, standards, controls, and operational metrics.
• Track IAM issues and remediation activities through completion.
• Help establish measurable service levels and key performance indicators for provisioning, approvals, access removal, and exception resolution.
• Promote least-privilege access, role-based access, clear group ownership, and timely removal of unnecessary access.

qualifications:
Associates or Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Business Analysis, Information Systems, or a related discipline, or equivalent professional experience.

Three or more years of experience in business analysis, identity and access management, cybersecurity, Active Directory administration, or a related technology function including PowerShell.

Demonstrated experience analyzing Microsoft Active Directory users, groups, memberships, attributes, organizational units, and account status.

Hands-on experience writing and executing PowerShell scripts for Active Directory analysis and reporting.

Experience using Python for data analysis, reconciliation, automation, or reporting.

Strong understanding of identity lifecycle management, including onboarding, transfers, terminations, provisioning, deprovisioning, and access certification.

Experience gathering and documenting business requirements, functional requirements, user stories, workflows, and acceptance criteria.

Strong analytical skills with the ability to work with large and complex datasets.

Advanced proficiency with Microsoft Excel, including lookup functions, pivot tables, formulas, data validation, and data comparison.

Strong written and verbal communication skills.

Ability to explain technical IAM issues to both technical and nontechnical audiences.

Strong documentation, organization, problem-solving, and stakeholder-management skills.

Preferred Qualifications

Experience with Microsoft Entra ID, formerly Azure Active Directory not required.

Experience with IAM or identity governance platforms such as SailPoint, Saviynt, Okta, Microsoft Entra ID Governance, CyberArk, or similar technologies.

Experience with ServiceNow request, incident, change, or identity-related workflows.

Familiarity with SQL, REST APIs, JSON, Git, source-control practices, or data-visualization tools.

Knowledge of privileged access management, multifactor authentication, single sign-on, federation, and conditional-access concepts.

Experience supporting access certifications, entitlement reviews, audit requests, or regulatory-control testing.

Familiarity with RBAC, least privilege, segregation of duties, zero-trust principles, and identity-governance frameworks.

Relevant certifications such as CBAP, CCBA, Security+, Microsoft Identity and Access Administrator, ITIL, or equivalent credentials.

Technical Skills

Microsoft Active Directory

Microsoft Entra ID

PowerShell

Python

Microsoft Excel

IAM and identity-governance platforms

ServiceNow

Data analysis and reconciliation

Process mapping and requirements documentation

SQL and API integration knowledge

Reporting and dashboard development

Git or comparable source-control tools

Core Competencies

Analytical thinking and structured problem solving

Business and technical requirements translation

IAM process and control awareness

Data accuracy and attention to detail

Stakeholder facilitation and communication

Process improvement and automation

Risk identification and escalation

Documentation and knowledge management

Ownership and accountability

Ability to manage multiple priorities

Key Measures of Success

Improved accuracy and completeness of Active Directory and IAM data.

Reduction in unmanaged, stale, orphaned, or incorrectly assigned access.

Increased automation of recurring access-analysis and reporting activities.

Timely completion of requirements, analysis, testing, and remediation activities.

Improved onboarding, transfer, termination, and access-review cycle times.

Clear ownership and governance of Active Directory groups and entitlements.

Reduction in manual effort, provisioning errors, and audit exceptions.

Effective communication of IAM risks, dependencies, and recommended actions

Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.

At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact View email address on randstadusa.com.


Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).

This posting is open for thirty (30) days.