Principal IGA / IAM Analyst / Engineer

Identity Access Management (IAM) And Identity Governance Administration (IGA) Technologist

A strategic and trusted insurance partner, Berkshire Hathaway Specialty Insurance (BHSI), provides a broad range of commercial property, casualty and specialty insurance coverages and outstanding service to customers and brokers around the world. Part of Berkshire Hathaway's insurance operations, we bring our solutions to market with our stellar brand name, top-rated balance sheet, and the expertise of our global team of professionals, who exude excellent capabilities and strong character.

We are a values-based organization where respect, integrity, excellence, collaboration, and passion define who we are and how we do business. We value diversity of backgrounds, experience, and perspectives and strive to foster an inclusive environment that enables all our team members to bring their best selves to work. We are one team committed to building a culture where every teammate has the opportunity to contribute and be recognized. Want to be part of the team building the finest property, casualty, and specialty lines insurance company in the world?

Learn more about our unique culture and history.

Berkshire Hathaway Specialty Insurance (BHSI) is seeking a seasoned technologist in the Identity Access Management (IAM) and Identity Governance Administration (IGA) arena. This role will play a critical part in securing enterprise access across cloud and hybrid environments while balancing strong security controls with business productivity. As a key member of our cybersecurity team, you will lead and coach teammates driving how we control and manage access to our network in the age of Artificial Intelligence. You will be an integral part of the strategy and design of our identity security posture management in this new and exciting role. If you are passionate about securing identities, both human and non-human, as well as securely accessing networks and applications, we would be excited and interested in speaking with you.

Duties and Responsibilities

• Act as a subject-matter expert for identity security, collaborating with Security Engineering, IT Operations, and business stakeholders to design and enhance identity access and identity governance capabilities.
• Further drive our Zero-Trust initiative by treating AI agents, applications, & identities as an entity that must authenticate and have its' activity mapped to a human owner.
• Design, implement, and maintain Identity & Access Management (IAM) solutions across cloud and hybrid environments with both human and non-human identities.
• Administer authentication and authorization mechanisms including multi-factor authentication (MFA), Single Sign-On (SSO), and passwordless authentication.
• Support identity lifecycle management (joiner, mover, leaver processes), including Just-in-time (JIT) privileged access utilizing Microsoft Entra PIM.
• Develop, maintain, and enforce IAM/IGA documentation, standards, procedures, and operational runbooks.
• Configure and manage Conditional Access Policies to enforce security controls, including MFA, device compliance, risk-based access, and least-privilege access.
• Assist with identity-related incident response and forensic investigations.
• Stay current on identity security trends, emerging threats, and evolving technologies, and recommend improvements to strengthen the organization's security posture.

Qualifications, Skills, and Experience

• 5+ years of proven success in Identity & Access Management and Identity Governance with deep hands-on experience in Azure and AWS environments.
• Strong understanding of authentication and authorization protocols, including SAML, OAuth 2.0, and OpenID Connect, as well as directory services such as Active Directory, Azure AD, and Microsoft Entra ID.
• Strong experience designing Microsoft Conditional Access policies, along with role-based and attribute-based access control (RBAC/ABAC) models.
• Strong analytical, troubleshooting skills with the ability to diagnose complex identity and access issues.
• Exceptional communication skills with the ability to translate complex technical issues into clear, actionable business insights.
• Industry-recognized certifications such as CIAM, CAMS, CIMP or similar are a plus.

BHSI Offers

• A competitive package and exciting growth opportunities for career-oriented teammates.
• A dynamic, action oriented, and thoughtful environment centered on always doing the right thing for our customers, teammates, and our other stakeholders.
• A purposely non-bureaucratic organization that embraces simplicity over complexity and emphasizes individual excellence in a team framework.
• Benefits that support your life and well-being, which include:
• Comprehensive Health, Dental and Vision benefits
• Disability Insurance (both short-term and long-term)
• Life Insurance (for you and your family)
• Accidental Death & Dismemberment Insurance (for you and your family)
• Flexible Spending Accounts
• Health Reimbursement Account
• Employee Assistance Program
• Retirement Savings 401(k) Plan with Company Match
• Generous holiday and Paid Time Off
• Tuition Reimbursement
• Paid Parental Leave

The base salary range for this position in Boston is $130,000 - $170,000 along with annual bonus eligibility. Total compensation for a candidate is determined by their relevant skills, location, and experience. We value our teammates – both their capabilities and character – as demonstrated by our amazing culture.

NOTE: Compensation will be commensurate with experience. This job description is not intended to be all-inclusive. Team Member may perform other related duties as negotiated to meet the ongoing needs of the organization.