Identity & Access Analyst (Contract, W-2)

• Identity & Access Analyst
• Location: US-based. eastern or central time zones.
• US Citizenship or Green Card Required.

**This role is NOT open to third party recruiters.**

Overview:

TekStream is looking for an Identity and Access Analyst to support our client’s Corporate Information Security team. This is a W-2 contract role, direct with TekStream. The duration is estimated to be 5 months. It requires at least 3 years of experience in a contributing role on an Information Security team, dealing with Identity and Access Management.

The Identity Access Analyst is responsible for :

• Supporting Corporate Information Security by maintaining and updating Access Control Identity, and Governance & Access Management initiatives
• Processing security requests to provide client resources the appropriate level of security access.
• Monitoring security and change requests to ensure that system accessibility is confidential and availability is maintained.
• Partnering with management in account administration oversight, access reviews related to a range of platforms, applications and databases.
• Recommending improvements to process flows to support audit activities and ensure integrity.
• Acting as the main point of contact for client/customer resources for issues and also processes more complex requests such as IDs or ACF2 rule updates.
• Communicating with management on projects, initiatives and daily tasks.

• They will be responsible for building authoritative vendor access inventory and discovering hidden access:
• Build Authoritative Vendor Access Inventory
• Identify and maintain a complete inventory of IAM Platforms
• Active Directory
• Okta
• Legacy IAM systems
• ACF2
• TSO
• PAM platforms

Discover Hidden Access:

• Service accounts
• Application accounts
• Shared admin IDs
• PAM roles
• Jump server access
• Bastion hosts
• API credentials
• Certificates used for authentication
• Automated jobs and scripts

Qualifications:

• Required Knowledge, Skills, Abilities and Experience:
• Minimum of 3 to 6 years experience in a contributing role on an Information Security team
• Knowledge of related technologies such as operating systems, directory services, and network protocols
• Bachelor’s degree in Computer Science, Information Systems, Information Security, Engineering OR related major OR equivalent work experience.
• Security certifications are preferred or willingness to obtain.

• Must be capable of independently reviewing Network and Infrastructure Diagrams
• Network diagrams
• Routing diagrams
• Firewall diagrams
• Data flow diagrams
• Replication architectures
• Virtualization diagrams

• Technical Skills Required
• Active Directory
• Okta
• IAM Governance
• Service Account Management
• Privileged Access Management
• RBAC Design
• LDAP
• SSO
• MFA

• Infrastructure Understanding Required
• Windows Servers
• Linux
• Unix
• VMware
• Storage
• Citrix end-to-end support and user support
• Network diagrams
• Firewalls
• Load balancers

• Mainframe Knowledge (Strongly Preferred)
• Ability to understand:
• ACF2
• TSO
• Mainframe access models
• Organized (project management type skills)
• Technical knowledge / enough knowledge of the systems/domains to be able to role-based analysis (acces enablement/disablement) on areas such as the following:
• Hypervisor administration
• Distributed server environments
• Remote access enablement - ssh, telnet, rep
• Access enablement/disablement

Soft Skills:

• Advanced written and verbal communications skills
• Detail-orientation
• Proficiency in Microsoft Office – Word, Excel and PowerPoint
• Active Listening Skills
• Ability to adjust to changing priorities while multitasking effectively
• Demonstrated ability to perform critical analysis, follow documented procedures, and produce reports
• Ability to take direction