IAM Security Analyst

IAM Security Analyst

IAM Security Analyst Position Location: Pittsburgh, PA, Cleveland, OH, Dallas, TX, Birmingham, AL, Phoenix, AZ 5 days in office required.

Pay Rate: $40 to 55/hr. on W2 ONLY

Length of Assignment: 12 Months Contract to Hire role

Function of the Group

The Segregation of Duties (SoD) operations team manages SoD controls within the IAM program. Implementing preventative and detective measures to mitigate access risk. This strengthens regulatory compliance, audit readiness, and overall security posture across Client.

Initiatives/Projects

The team is leading the implementation of the SoD module within OIM to enable automated detection and prevention of toxic access combinations, while also developing and refining SoD rules. The team will perform ongoing monitoring of SoD violations and partner with application owners and policy stakeholders to validate access risk.

Industry Background

Financial service industries (Banking, Insurance, etc.) or any industry with high scrutiny of access risk and policy enforcement.

Roles and Responsibilities

Execute daily SoD scans to identify potential and effective access violations. Monitor, triage, and investigate SoD violations, ensuring timely resolution or escalation. Provide on-demand support to end users and business stakeholders to analyze and remediate access conflicts. Partner with application owners and access request teams to validate and resolve violations in alignment with policy. Build, configure, and maintain toxic combination rules within Oracle Identity Manager (OIM). Contribute to the design and improvement of SoD control framework within Client IAM program. Drive continuous improvement in automation, reporting, and processes related to SoD.

Must Have Technical Skills (3-5 years of experience required):

• Experience working within OIM (preferred) or similar platforms including building and maintaining SoD rules and understanding access provisioning.
• Strong understanding of least privilege, access requests, and certification processes.
• Experience supporting audits, maintaining compliance, and documenting SoD controls, violations, and remediation steps.
• Ability to analyze/understand violations and troubleshoot access issues.
• Oracle Identity Manager (OIM) knowledge
• Ex-Client Background Required.

Pre-Screening Questions:

1. Can you describe your experience managing SoD rules and provide an example of implementing or identifying toxic combination of access? 2. When a SoD policy or rule is identified, how would you work with application owners, business stakeholders, or policy teams to define, validate, and implement it? 3. What IAM/SoD tools have you used and what specific tasks or actions did you perform?

Interview Process:

2 rounds - First w/ Hiring Manager & Second w/Hiring Manager's Leader.

Hiring Manager Stack Ranking of Importance (Most Important to Least Important):

1. Prior Client Experience 2. Skills 3. Rate 4. Location