Identity & Access Management Analyst

Trupanion is a leading provider of medical insurance for cats and dogs in North America. Our mission is to help loving, responsible pet owners budget and care for their pets. At Trupanion, we offer a collaborative, casual, and pet-friendly environment where everyone is encouraged to be themselves.

Job Description

The Identity & Access Management (IAM) Analyst supports secure, accurate, and timely access across Trupanion's workforce and enterprise applications. This hands-on role manages identity lifecycle and access governance activities, helps maintain IAM controls, and improves processes through troubleshooting, documentation, and automation.

This position is open to candidates in the Seattle, WA area . You will have a hybrid remote/in-office schedule where you will work from our casual, pet-friendly office at least 3 days a week.

Responsibilities

• Administer user identities, accounts, roles, groups, and entitlements across enterprise applications and infrastructure.
• Support Joiner, Mover, and Leaver processes to ensure access is provisioned, changed, and removed accurately and on time.
• Perform user access reviews, entitlement reviews, role reviews, and access certifications, and coordinate remediation of inappropriate, excessive, or outdated access.
• Support Role-Based Access Control and translate business access requirements into sustainable roles and access policies.
• Administer identity services in Microsoft Entra ID and Active Directory, including users, groups, enterprise applications, authentication, and identity lifecycle processes.
• Support Privileged Access Management processes and technologies, including CyberArk.
• Use identity governance and automation platforms, including Lumos, to improve access requests, approvals, provisioning, reviews, and deprovisioning.
• Investigate identity, authentication, and access issues; identify root causes; and provide clear technical guidance to employees and partner teams.
• Automate repetitive IAM activities and assist with onboarding applications into identity governance and access management processes.
• Maintain audit-ready IAM documentation, controls, and evidence, and collaborate with IT, Information Security, People Operations, application owners, and business teams.

Qualifications

• 2+years of hands-on experience in Identity & Access Management, identity administration, security administration, or a closely related technical function.
• Bachelor's degree in information technology, cybersecurity, computer science, or a related field, or equivalent practical experience.
• Experience administering identities, accounts, groups, roles, entitlements, and access in Microsoft Entra ID and Active Directory.
• Relevant certification or active study toward one preferred; such as Microsoft Certified: Identity and Access Administrator Associate (SC-300) , CyberArk Defender or Sentry, or an ISACA security, risk, governance, or audit credential.
• Experience supporting Joiner, Mover, and Leaver processes, including provisioning, access changes, deprovisioning, and timely removal of access.
• Experience with Single Sign-On and authentication technologies, including SAML, OAuth, OpenID Connect, Multi-Factor Authentication, or Conditional Access.
• Experience using an Identity Governance and Administration or access management platform to support access requests, approvals, provisioning, certifications, and deprovisioning.
• Experience supporting user access reviews, audit evidence, and access governance controls in a regulated or controlled environment.
• Working knowledge of least privilege, Role-Based Access Control, separation of duties, and privileged access principles.
• Ability to troubleshoot identity and access issues, document technical processes, and maintain accurate operational records.
• Clear written and verbal communication skills, with the ability to work effectively with technical teams, application owners, and business partners.

Skills

• Experience with Microsoft 365 administration, CyberArk, Lumos, or another PAM or identity governance platform.
• Experience with PowerShell, APIs, SQL, or other forms of IT automation and systems integration.
• Knowledge of SOX controls, audit support, evidence management, or access governance in a regulated environment.
• Experience designing or maintaining RBAC models, access policies, or application onboarding standards.
• Strong analytical and problem-solving skills, with a focus on identifying root causes and improving processes.
• Ability to manage competing priorities, take ownership of work, and collaborate across technical and business teams.

Compensation :

• The base hourlyrange for this position is $33 - $35 per hour,on a full-time schedule.
• Along with base compensation, Trupanion employees are currently eligible for monthly bonuses.
• We want all employees to be invested in Trupanion's success, so we grant Restricted Stock Units to all new team members. Our new hire grants vest over 4 years.

#LI-HYBRID

Additional Information

Benefits and Perks:

• Full medical, dental, and vision benefits at no cost to the employee
• Four weeks of paid time off and 9 paid float holidays (you can decide which days are most important to you!)
• Five-week sabbatical after five years of employment
• Open, casual, pet-friendly, and fun office environment
• Free medical health insurance for your pet (1 dog or cat)Paid time off to volunteer at nonprofit organizations
• Seattle Office Amenities: Free on-site gym, free dog walking services for office pets during business hours, free parking, and paid ORCA cards.

Trupanion is an equal-opportunity employer and embraces diversity. We are committed to building a team that represents a variety of backgrounds, abilities, perspectives, and skills.

We will ensure that individuals are provided reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive other benefits and privileges of employment. Please contact us to request accommodations.

Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time.