IAM Analyst (Tier 1)

The Tier 1 IAM Analyst supports identity and access management (IAM) operations while contributing to broader cybersecurity initiatives. This role is responsible for executing day-to-day access management tasks, supporting users, and assisting in the protection of systems and data through security analysis, monitoring, and compliance activities. The analyst works under established procedures and guidance while gaining exposure to system architecture, security controls, and enterprise IT environments.

The Tier 1 Analyst collaborates with IAM, cybersecurity, and project teams to ensure secure access provisioning, support incident response efforts, and contribute to maintaining compliance with federal and client security requirements.

Key Responsibilities

IAM Operations & Access Management

• Perform initial triage of access-related communications, requests, and tickets; route appropriately based on procedures.
• Process user access requests (provisioning, modification, deactivation) using workflow tools such as Jira.
• Manage ticket queues, follow up on aging requests, and ensure timely completion within defined SLAs.
• Post access requests for approval (e.g., SharePoint, ISSO/COR coordination).
• Maintain tracking logs and spreadsheets for onboarding, offboarding, and access audits.
• Generate and distribute reports (daily, weekly, monthly), including deactivation and audit reports.
• Support inbox management, respond to user inquiries, and resolve basic access/login issues.

User Support & Documentation

• Communicate with end users to troubleshoot access issues and provide guidance.
• Develop and maintain Standard Operating Procedures (SOPs), knowledge articles, and user guides.
• Assist in updating audit artifacts, process flows, and system documentation.

Cybersecurity & Risk Support

• Assist with research and analysis to identify, mitigate, and prevent cybersecurity risks.
• Support the development of cybersecurity tools, methods, and acceptance criteria for system security.
• Investigate security incidents to determine scope, impact, and potential compromise.
• Contribute to security validation activities, including testing systems and identifying vulnerabilities.
• Participate in audit reviews and monitor corrective actions through closure.
• Assist in maintaining incident response, threat assessment, and damage assessment programs.
• Support Security Test & Evaluation (ST&E) activities, including preparation, execution, and reporting.

Collaboration & Escalation

• Work closely with Tier 2/Tier 3 teams on escalations, audits, and project-based initiatives.
• Support compliance efforts, including third-party audits and major system releases.
• Escalate complex issues or unclear requirements to senior analysts or team leads.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field (or equivalent experience).
• 1-2 years of experience in IAM, cybersecurity, or systems security.
• PLEASE NOTE THAT THIS POSITION REQUIRES WORKING ON-SITE IN WASHINGTON DC 1-2 DAYS/WEEK

Skills & Competencies

• Strong attention to detail and ability to follow defined procedures.
• Effective communication skills for both technical and non-technical audiences.
• Ability to manage multiple tasks and prioritize in a fast-paced environment.
• Basic understanding of IAM concepts, security controls, and system architecture.
• Familiarity with ticketing/workflow tools (e.g., Jira) and reporting processes.
• Awareness of cybersecurity principles, threats, vulnerabilities, and mitigation techniques.

Compensation Ranges

Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.

EEO Requirements

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.

Physical Requirements

The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.

Disclaimer

The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.