Job Summary

The Application Identity and Access Security Analyst will ensure that authorized users have the right access to company systems, data, and applications.

• Manage user access to systems, applications, and data. Maintaining the concept of least privilege.
• Direct testing, piloting, documenting, monitoring and implementation planning for new SailPoint/IAM services and environments.
• The analyst will be the technical authority and subject matter expert in designing, implementing, and managing identities across all platforms. Windows, Aix, 3rd party applications.
• Develop and maintain technical documentation, policies, and procedures for AD, M365 systems, SailPoint etc.
• Monitor compliance with policies, regulations, and customer requirements.
• Assist the Manager of Identity in developing the enterprise IAM/PAM strategy.
• Manage and implement privilege access roles and responsibilities for users and service accounts across the domain. Preference with Secret Server.

Minimum Qualifications

• Bachelor’s degree or better in computer science or a related field and 3 years of job-related experience OR equivalent experience in lieu of degree.
• Professional certification such as Certified Identity and Access Manager (CIAM), Certified Identity Management Professional (CIMP) or Certified Information Systems Security Professional (CISSP) is preferred.
• 1-3 years of experience in Azure/AD IAM or a related field.
• Strong technical skills, including experience with identity and access management solutions.
• Familiarity with best practices and compliance standards.
• Strong project management skills
• Knowledge of dynamic and high-level languages such as PowerShell or Python.
• Experience with SQL databases and SailPoint preferred.
• 1-3 years Azure Cloud security experience including MS PIM, Subscription, Management group, resource group and conditional access experience.

Job Duties

The Identity Analyst will be responsible for ensuring the security and integrity of CITGO’s information systems which involves managing user access, defining and enforcing access policies, and monitoring compliance with security standards.

Responsible for ensuring that relevant Privileged Access Management (PAM) Controls are adequately enforced across platforms and applications to comply with IAM Standards.

Provide support for access-related issues, working closely with IT support and helpdesk teams.

Manage user identity lifecycle including onboarding, offboarding, and account updates.

Administer user accounts, permissions, and access controls.

Handle escalated customer inquiries and support tickets.

Develop and automate processes accordingly

Resolve day-to-day SailPoint/IAM application environment technical issues, including troubleshooting of auxiliary components such as SQL server, SAP or third-party sources.

Investigate and resolve access-related incidents, anomalies, or security breaches.

 Assist in Incident Response. Manage, monitor, and resolve critical outstanding information security risk exposures

Job Duties II

Keep up to date with the latest industry developments and trends.

Assist in Information Security risk assessments

Develop and maintain training materials related to identity and access management

Monitor compliance with internal policies and external regulations.

Monitor activity logs to identify security incidents