Identity Data Analyst

MatchPoint Solutions is a fast-growing, young, energetic global IT-Engineering services company with clients across the US . We provide technology solutions to various clients like Uber, Robinhood, Netflix, Airbnb, Google, Sephora, and more! More recently, we have expanded to working internationally in Canada, China, Ireland, UK, Brazil, and India . Through our culture of innovation, we inspire, build, and deliver business results, from idea to outcome. We keep our clients on the cutting edge of the latest technologies and provide solutions by using industry-specific best practices and expertise.

We are excited to be continuously expanding our team. If you are interested in this position, please send over your updated resume. We look forward to hearing from you!

Identity Data Analyst
Remote
6 Months
Pay rate: $65 - $70/hr on W2

The Identity Data Analyst will turn identity and access data into actionable findings, risk indicators, remediation work, and leadership reporting. This seasoned analytical role requires independent investigation of data, identification of patterns and exceptions, validation of findings with stakeholders, clear explanation of risk, and support for remediation. The analyst will work across enterprise identity, privileged-access, access, ticketing, and related operational data to help address inactive accounts, missing ownership, contractor expirations, and excessive or inconsistent access.

Responsibilities:

Extract, normalize, analyze, and reconcile identity and access data from Active Directory, Microsoft Entra ID, privileged access management (PAM), Saviynt, Jira, and other authorized sources.

Identify inactive, stale, orphaned, duplicate, unowned, misclassified, or inconsistent identities and entitlements.

Analyze service accounts, application identities, privileged accounts, contractor accounts, group memberships, access assignments, and ownership records.

Identify service accounts that have not logged in within defined periods and support ownership validation and remediation.

Analyze contractor and contingent-worker data to identify upcoming expirations, missing owners, unresolved access, and offboarding risks.

Investigate over-provisioned access, anomalous access patterns, toxic combinations, excessive group membership, and other identity-risk indicators.

Build repeatable queries, scripts, extracts, reconciliation routines, dashboards, and reports that enable the identity and access management (IAM) team to take action.

Use PowerShell, Structured Query Language (SQL), Python, application programming interfaces (APIs), spreadsheets, or comparable tools to automate data collection and analysis where appropriate.

Trace historical tickets and operational records to identify recurring issues, bottlenecks, approval gaps, and process trends.

Maintain data dictionaries, source-to-target mappings, analysis logic, assumptions, data-quality rules, and evidence supporting findings.

Translate analytical findings into prioritized remediation backlogs with owners, recommended actions, due dates, dependencies, and status.

Prepare recurring metrics and leadership reporting covering accomplishments, risks, trends, priorities, and unresolved decisions.

Collaborate with IAM engineers, IAM leadership, identity architects, application owners, human resources, security, audit, and business stakeholders to validate findings.

Protect sensitive identity data and follow approved handling, access, retention, and evidence-management practices.

Qualifications:

5 or more years of experience in information technology, identity operations, cybersecurity analytics, data analysis, systems analysis, or a related discipline.

Demonstrated ability to analyze enterprise data and produce actionable conclusions, not merely compile reports.

Working knowledge of Active Directory and Microsoft Entra ID identity objects, groups, roles, access assignments, service accounts, and lifecycle data.

Experience investigating data quality, access risk, account ownership, entitlement, or operational-control issues.

Experience with at least one scripting, query, or automation language such as PowerShell, SQL, Python, or equivalent.

Strong spreadsheet and reporting skills, including the ability to reconcile large datasets and explain exceptions clearly.

Ability to document analysis methods, validate data with stakeholders, and defend conclusions with evidence.

Strong written communication and attention to detail.

Ability to work remotely within the United States.

Preferred Qualifications:

Experience with Saviynt, SailPoint, Microsoft Entra ID Governance, CyberArk, BeyondTrust, or another enterprise IAM platform.

Experience with identity security posture management, access certification, role mining, entitlement analysis, or service-account governance.

Experience with Jira data, ticket metrics, Power BI, data visualization, Representational State Transfer (REST) APIs, or identity data warehouses.

Familiarity with Sarbanes-Oxley (SOX), information technology general controls, North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP), critical infrastructure, or cybersecurity audit requirements.

Tools and Technologies:

Active Directory and Microsoft Entra ID

Privileged access management platforms and enterprise IAM platforms, including Saviynt or comparable technologies

PowerShell, SQL, Python, and REST APIs

Jira, Power BI, spreadsheets, dashboards, and identity data warehouses

Access records, lifecycle data, group and role data, entitlement data, and operational records

MatchPoint Solutions provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.