Senior SailPoint IAM Security Analyst

Senior SailPoint IAM Security Analyst

Location: Arlington, VA (Remote, Occasional Travel)

Type: Long Term

Overall min 12+ years

Required Skills:

• SailPoint IdentityIQ end-to-end implementation
• Architecture Depth
• IAM Design
• Trade-offs
• Production Experience
• Ownership
• Entra ID / Azure AD IAM
• Conditional Access, SSO (SAML/OAuth), MFA
• Defender for Cloud / EDR
• Microsoft Purview DLP
• M365 Security (Exchange, SharePoint, OneDrive, Teams)

Job Details & Responsibilities:

Responsible for Sailpoint Identity IQ deployment and Entra ID User management, IAM concepts within Azure Active Directory (AAD), including user and group management, conditional access policies, Enterprise app, SSO, Oauth and Multi-Factor Authentication (MFA)

Implement Azure Defender EDR policies, Purview DLP, for Azure Iaas/PaaS/SaaS/Microsoft 365, with Sentinel integration, and Security Center and Compliance Center for monitoring and managing security and compliance-related configurations.

Responsible for securing workflows within Microsoft Office 365 applications, including but not limited to Exchange Online, SharePoint Online, OneDrive for Business, Teams, and Power Platform.

Responsible for monitoring SIEM and analyzing potential threat events using Security tools such as Tenable, Crowdstrike ArcticWolf XDR solutions.

Responsible for Threat Hunting and identifying potential Indicators of Compromise (IOC’s).

Support and be responsible for Vulnerability Management and Pen Testing.

Responsible for configuration of IDS systems, analyze firewall traffic.

As part of the Cyber Security team, participates in VGLNG’s cybersecurity strategy, security awareness programs, security architecture, and security incident response.

Evaluates new cybersecurity threats and IT trends and develops effective security controls.

Supports effective disaster recovery policies and standards to align with company business continuity management program goals. Ensures business critical services are recovered in the event of disasters or other incidents, and provides support, and in-house consulting in these areas.

Responds to potential security breaches, coordinates response, and recommend corrective actions.