Identity & Access Management Analyst

Benefits Competitive compensation Medical, Dental, and Vision insurance 401(k) Retirement Savings Plan with substantial company match Life and Travel Insurance Tuition Assistance Wellness Reimbursement Program Paid Holidays and Vacation Job Description We are seeking a diligent and experienced Identity and Access Management (IAM) Analyst to join our Information Technology and Cybersecurity team. The IAM Analyst will manage and secure user identities, access controls, and authentication and authorization systems across the organization’s IT and OT environments. Responsibilities include administration and governance of identity lifecycle management, access provisioning, role-based access control, privileged access management, and ensuring compliance with security policies and regulatory requirements. Responsibilities Administer and maintain IAM platforms such as Azure Entra ID, Active Directory, SailPoint, and related solutions. Design, create, and manage Microsoft Entra ID Enterprise Applications and App Registrations, including configuration of authentication methods (OAuth2/OIDC/SAML), API permissions, secrets/certificates, and lifecycle governance. Manage the full identity lifecycle for employees, contractors, and service accounts. Implement and maintain role-based access control (RBAC) models to align access rights with job functions and the principle of least privilege. Administer and support MFA, SSO, and conditional access policies. Monitor privileged access management (PAM) solutions and conduct regular user access reviews and certification campaigns. Investigate and resolve access-related incidents, including unauthorized access attempts, account lockouts, and permission escalation issues. Develop and maintain IAM policies, procedures, and standard operating documentation. Partner with HR, IT, and business units for timely onboarding, offboarding, and role change processes. Support integration of applications and systems with IAM platforms via SAML, OAuth, OIDC, and SCIM. Monitor IAM systems for anomalies, misconfigurations, and security risks; recommend remediation actions. Generate reports and dashboards on IAM metrics such as access review completion rates and compliance. Automate IAM workflows using scripting and orchestration tools. Stay updated on IAM trends and apply knowledge to improve identity security posture. Assist audit and compliance activities by providing evidence of access controls. Promote awareness of identity security and access hygiene best practices. Participate in IAM-related project planning, execution, and on‑call rotation as needed. Provide storm/emergency response support. Mandatory Requirements Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field, or an associate degree with 3+ years of IAM experience, or a high school diploma with 5+ years of IAM experience. Experience administering Azure Entra ID, Active Directory, or other IAM/IGA platforms. Understanding of IAM concepts including identity lifecycle management, RBAC, least privilege, SSO, MFA, and conditional access. Experience with user provisioning, de‑provisioning, and access certification processes. Experience configuring and administering Windows Servers, AD & Group Policy, Microsoft 365, Azure compute and networking resources. Experience with scripting for automation and analysis (PowerShell, Python, Bash). Familiarity with authentication and federation protocols such as SAML, OAuth, OIDC, and SCIM. Knowledge of privileged access management principles and tools. Knowledge of regulatory and compliance frameworks (SOX, NERC CIP, NIST). Knowledge of Operational Technology (OT) systems and their access management requirements. Effective communication skills and ability to collaborate with diverse teams. Excellent analytical, decision‑making, multitasking, and organizational skills. Ability to work with limited direct supervision and respond to constructive feedback. Availability for on‑call and after‑hour incidents. Valid driver’s license. Pay range: $73,000 - $171,300. Preferred Qualifications 5+ years of experience in identity and access management or a closely related cybersecurity discipline. Experience with Identity Governance and Administration platforms such as SailPoint, Saviynt, or Microsoft Identity Governance. Experience in security and regulatory frameworks such as NIST, CIS Benchmarks, SOX, NERC CIP. Experience in Energy & Utilities or services industry. Experience implementing PAM solutions such as CyberArk, BeyondTrust, or Delinea. Experience with data visualization tools and building IAM operational dashboards. Experience developing IAM automation workflows and integrations. Relevant certifications such as CIAM, CISSP, CompTIA Security+, SC‑300, or SailPoint Certified IdentityNow Engineer. Equal Employment Opportunity All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, creed, color, ethnicity, arrest or conviction record, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, citizenship, genetic information, familial status, marital status, pregnancy‑related condition, domestic violence victim status, veteran or military status, or any other characteristic protected by federal, state or local laws. Central Hudson Gas & Electric Corporation takes affirmative action in support of its policy to employ and advance employment in individuals who are protected veterans and individuals with disabilities. VEVRAA FEDERAL CONTRACTOR. Application Notes Job applications must be submitted through the company website. Applications sent via e‑mail or US Mail will not be considered. No phone calls or agencies. All replies will be held in strict confidence. #J-18808-Ljbffr Central Hudson Gas & Electric Corp