Identity & Access Management Analyst

The Identity & Access Management (IAM) Analyst supports secure accurate and timely access across Trupanions workforce and enterprise applications. This hands-on role manages identity lifecycle and access governance activities helps maintain IAM controls and improves processes through troubleshooting documentation and automation.

This position is

open to candidates in the Seattle WA area

. You will have a hybrid remote/in-office schedule where you will work from our casual pet-friendly office at least

3 days a week. Responsibilities Administer user identities accounts roles groups and entitlements across enterprise applications and infrastructure. Support Joiner Mover and Leaver processes to ensure access is provisioned changed and removed accurately and on time. Perform user access reviews entitlement reviews role reviews and access certifications and coordinate remediation of inappropriate excessive or outdated access. Support Role-Based Access Control and translate business access requirements into sustainable roles and access policies. Administer identity services in Microsoft Entra ID and Active Directory including users groups enterprise applications authentication and identity lifecycle processes. Support Privileged Access Management processes and technologies including CyberArk. Use identity governance and automation platforms including Lumos to improve access requests approvals provisioning reviews and deprovisioning. Investigate identity authentication and access issues; identify root causes; and provide clear technical guidance to employees and partner teams. Automate repetitive IAM activities and assist with onboarding applications into identity governance and access management processes. Maintain audit-ready IAM documentation controls and evidence and collaborate with IT Information Security People Operations application owners and business teams. Qualifications 2 years of hands-on experience in Identity & Access Management identity administration security administration or a closely related technical function. Bachelors degree in information technology cybersecurity computer science or a related field or equivalent practical experience. Experience administering identities accounts groups roles entitlements and access in Microsoft Entra ID and Active Directory. Relevant certification or active study toward one preferred; such as

Microsoft Certified: Identity and Access Administrator Associate (SC-300)

CyberArk Defender or Sentry or an ISACA security risk governance or audit credential. Experience supporting Joiner Mover and Leaver processes including provisioning access changes deprovisioning and timely removal of access. Experience with Single Sign-On and authentication technologies including SAML OAuth OpenID Connect Multi-Factor Authentication or Conditional Access. Experience using an Identity Governance and Administration or access management platform to support access requests approvals provisioning certifications and deprovisioning. Experience supporting user access reviews audit evidence and access governance controls in a regulated or controlled environment. Working knowledge of least privilege Role-Based Access Control separation of duties and privileged access principles. Ability to troubleshoot identity and access issues document technical processes and maintain accurate operational records. Clear written and verbal communication skills with the ability to work effectively with technical teams application owners and business partners. Skills Experience with Microsoft 365 administration CyberArk Lumos or another PAM or identity governance platform. Experience with PowerShell APIs SQL or other forms of IT automation and systems integration. Knowledge of SOX controls audit support evidence management or access governance in a regulated environment. Experience designing or maintaining RBAC models access policies or application onboarding standards. Strong analytical and problem-solving skills with a focus on identifying root causes and improving processes. Ability to manage competing priorities take ownership of work and collaborate across technical and business teams. Compensation

: The base hourly range for this position is $33 - $35 per hour on a full-time schedule. Along with base compensation Trupanion employees are currently eligible for monthly bonuses. We want all employees to be invested in Trupanions success so we grant Restricted Stock Units to all new team members. Our new hire grants vest over 4 years.

#LI-HYBRID Additional Information : Benefits and Perks: Full medical dental and vision benefits at no cost to the employee Four weeks of paid time off and 9 paid float holidays (you can decide which days are most important to you!) Five-week sabbatical after five years of employment Open casual pet-friendly and fun office environment Free medical health insurance for your pet (1 dog or cat) Paid time off to volunteer at nonprofit organizations Seattle Office Amenities: Free on-site gym free dog walking services for office pets during business hours free parking and paid ORCA cards. For more information about Trupanion visit more about how Trupanion has revolutionized our industry and the reimbursement model: is an equal-opportunity employer and embraces diversity. We are committed to building a team that represents a variety of backgrounds abilities perspectives and skills. We will ensure that individuals are provided reasonable accommodation to participate in the job application or interview process perform essential job functions and receive other benefits and privileges of employment. Please contact us to request accommodations. Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time. Remote Work : No Employment Type : Full-time