Identity and Access Management Analyst

: At AES, we raise the quality of life around the world by changing the way energy works. Everyone makes an impact every day in our small, global teams. Apply here to start an extraordinary career today. Responsibilities:

• Identity Access Management (IAM):

• Implement and manage IAM processes and solutions using SailPoint IdentityNow, leveraging experience to ensure secure and efficient access to systems, applications, and data.
• Help develop and enforce IAM policies, standards, and procedures, drawing upon experience to ensure compliance and protect sensitive information.
• Collaborate with global cross-functional teams to integrate IAM solutions into existing systems and applications.

• IAM Integration and Application Onboarding:

• Lead the onboarding process for new applications, ensuring seamless integration with SailPoint IdentityNow, Active Directory, Azure AD / SSO and existing IAM frameworks.
• Work closely with application owners and stakeholders to understand access requirements and develop appropriate access controls.
• Troubleshoot and resolve issues related to application onboarding with a focus on SailPoint IdentityNow, Active Directory, and Azure AD integration.

• Access Governance:

• Assist with periodic access reviews and audits using SailPoint IdentityNow to ensure compliance with security policies and regulatory requirements.
• Implement access certification processes within SailPoint to validate and maintain the accuracy of access rights.

• Collaboration and Communication:

• Collaborate with IT security teams to align IAM strategies with overall security initiatives.
• Communicate effectively with stakeholders to gather requirements, provide updates, and address concerns related to IAM and application onboarding.

• Documentation:

• Maintain comprehensive documentation of IAM processes, application onboarding procedures, and access controls.
• Develop and update documentation for troubleshooting guides and best practices specific to IAM and application onboarding.

Qualifications:

• Bachelor's degree in Information Technology, or a related field, OR
• A combination of education and experience with over 5 years of proven experience in Identity Access Management, identity governance, compliance, and application onboarding, preferably in a highly regulated environment such as the energy sector and utilities.
• Hands-on experience with SailPoint IdentityNow and proficiency in integrating applications and enterprise systems.
• Proven experience in managing and securing a large user base, handling at least 15,000 users, demonstrating the ability to scale IAM solutions effectively.
• Significant experience working in a highly regulated environment, with a preference for candidates who have worked in the energy sector and utilities.
• Experience with identity governance processes, including access reviews, certifications, and compliance audits.
• Familiarity with compliance frameworks and regulations (e.g., GDPR, SOX, etc.) in a regulatory environment.
• Strong skills in Active Directory administration and support, including user provisioning, life cycle management, and security best practices.
• Experience with managing Azure AD / M365, including user provisioning, identity synchronization, MFA, dynamic groups and licensing and security configurations including conditional access policies.
• Hands-on experience with privileged access administration (PAM), preferably using CyberArk.
• Excellent communication and interpersonal skills working within a global organization.

AES is an Equal Opportunity Employer who is committed to building strength and delivering long-term sustainability through diversity and inclusion. Respecting all backgrounds, differences and perspectives enables us to improve the lives of our people, customers, suppliers, contractors, and the communities in which we live and work. All qualified applicants will receive consideration for employment without regard to sex, sexual orientation, gender, gender identity and/or expression, race, national origin, ethnicity, age, religion, marital status, physical or mental disability, pregnancy, childbirth, or related medical condition, military or veteran status, or any other characteristic protected under applicable law. E-Verify Notice: AES will provide the Social Security Administration (SSA) and if necessary, the Department of Homeland Security (DHS) with information from each new employee's I-9 to confirm work authorization.