Identity and Access Mgmt. Analyst I

If you are looking to make an impact on a meaningful scale, come join us as we embrace the Power of One!

We strive to be an employer of choice and establish a reputation for being a talent rich organization where Associates can grow their career caring for others. For over a century, we’ve served the health care needs of the people of Memphis and the Mid-South.

The IAM Analyst I is a technical, first level position that reports directly to the IAM Manager. The analyst helps define, establish, maintain, and manage identities across the organization. The analyst manages and maintains access to systems and applications following rigorous security, engineering, and governance principles, especially when provisioning and de-provisioning access. In addition, the IAM Analyst I helps with governing access, SSO, directory services, technical integrations, and supporting behavioral analytics. The ideal candidate has a technical background and possesses 2-4 years' experience in technology and security administration across large heterogenous networks, including third-party entities.

The IAM Analyst I works closely with teammates and other departments to establish and manage a process of enterprise-wide identities and access controls granted to systems and applications. The analyst uses IAM tools and platforms to support and manage provisioning, de-provisioning and exception changes, ensuring they are clearly tracked, reported and reviewed according to established policies. Daily, the analyst verifies solutions are healthy, tightly managed and performing optimally to prevent unauthorized access. The IAM Analyst I will provide L1 support for relevant IAM issues submitted via the ServiceNow ticketing system. To be successful, the analyst must have a good understanding of security principles and practical hands-on experience with host and application configurations, on and off-premise solutions, directory services, and zero trust principles. The IAM Analyst I must be able to function in a fast-paced environment and be able to handle a myriad of unrelated issues. The role requires someone who is an analytical person, curious, and above all, security focused, The ideal candidate must be comfortable and responsible working in a remote setting. This role will have a moderate to high level of autonomy to manage assigned tasks and responsibilities. It is a priority that the individual while working remotely be on time, visible online in MS Teams, be responsive and be ready to join ad hoc meetings. This role will also include being a part of an after-hours on-call rotation.

The IAM Analyst I must possess a high degree of integrity, trustworthiness, and confidence and represent the MLH and the management team with the highest level of professionalism, while modeling appropriate behavior as exemplified in MLH Mission, Vision and Values.

Working at MLH means carrying the mission forward of caring for our community and impacting the lives of patients in every way through compassion, a deliberate focus on service expectations and a consistent thriving for excellence.

A Brief Overview
The IAM Analyst I is a technical, first level position that reports directly to the IAM Manager. The analyst helps define, establish, maintain, and manage identities across the organization. The analyst manages and maintains access to systems and applications following rigorous security, engineering, and governance principles, especially when provisioning and de-provisioning access. In addition, the IAM Analyst I helps with governing access, SSO, directory services, technical integrations, and supporting behaviorial analytics. The ideal candidate has a technical background and possesses 2-4 years' experience in technology and security administration across large heterogenous networks, including third-party entities.

The IAM Analyst I works closely with teammates and other departments to establish and manage a process of enterprise-wide identities and access controls granted to systems and applications. The analyst uses IAM tools and platforms to support and manage provisioning, de-provisioning and exception changes, ensuring they are clearly tracked, reported and reviewed according to established policies. Daily, the analyst verifies solutions are healthy, tightly managed and performing optimally to prevent unauthorized access. The IAM Analyst I will provide L1 support for relevant IAM issues submitted via the ServiceNow ticketing system. To be successful, the analyst must have a good understanding of security principles and practical hands-on experience with host and application configurations, on and off-premise solutions, directory services, and zero trust principles.

The IAM Analyst I must be able to function in a fast-paced environment and be able to handle a myriad of unrelated issues. The role requires someone who is an analytical person, curious, and above all, security focused, The ideal candidate must be comfortable and responsible working in a remote setting. This role will have a moderate to high level of autonomy to manage assigned tasks and responsibilities. It is a priority that the individual while working remotely be on time, visible online in MS Teams, be responsive and be ready to join ad hoc meetings. This role will also include being a part of an after-hours on-call rotation. The IAM Analyst I must possess a high degree of integrity, trustworthiness, and confidence and represent the MLH and the management team with the highest level of professionalism, while modeling appropriate behavior as exemplified in MLH Mission, Vision and Values.

What you will do

• Serve on a distributed security team responsible for establishing and maintaining identities and entitlements within IAM solutions.
• Implement identity controls and settings that align with policies and governance structure.
• Work closely with security leadership, teammates, and stakeholders to evaluate and implement access models that align with organizational risk posture.
• Ensure authorized access by investigating improper access; revoking access; reporting violations; monitoring information requests, ensuring consistent application of access principles, and recommending improvements. Perform system access audits and monitor system usage for policy compliance.
• Document requirements, process flows, use cases, etc. related to identity and access management and provides data requested for security audits and reviews.
• Document access, policies and exceptions, and maintain integrity for audit reviews.
• Research and maintain working knowledge of current authentication and authorization techniques. Establishes standards and workflows and ensures compliance with those standards for areas such as privileged access and multi-factor authentication.
• Work closely with incident responders during potential incidents and escalate to management as needed.
• Facilitate communication between Information Security, IT, business, and clinical operations.
• Make recommendations for improvements in automation efficiencies, security practices, and end-user experience.
• Collect key performance indicators and related operational metrics, and track SLAs used to validate success as well as future areas of improvement.
• Prioritize incoming incidents, requests, problems, and tasks and give realistic resolution dates to the requestor.
• Track and document all steps taken within the ServiceNow ticket system for traceability.
• Follow-up with the requestor to obtain confirmation that they issue is resolved.
• Accomplish tasks independently and be able to follow complex procedures or suggest structural improvements where necessary.
• Escalate issues when required.

Education Qualifications

• High School Diploma or Equivalent
• Bachelor's Degree Information Technology

Experience Qualifications

• 1-3 years Identity and Access Management Must have at least two (2) years of experience in Identity and Access Management using modern toolsets. Must have familiarity with administering directory services, Windows and Azure AD, SSO, MFA, and role-based access controls (RBAC).
• Preferred: Experience with one or more scripting languages (e.g. Python, Java, Powershell, Bash)

Skills and Abilities

• Ability to assess a situation, seek multiple perspectives, and, if necessary, gather more information to arrive at an appropriate solution.
• Be able to listen effectively and decompose complex technical issues and be able to articulate root cause to non-technical customers.
• Understand process improvement by reviewing current processes and using judgment and experience to recommend new and innovative processes.
• Knowledge of current cybersecurity technologies, practices, and standards (e.g., NIST, ISO) and their relationship to IAM
• Fundamental understanding of identity vs. authentication vs. access control elements and how they work together
• Experience administering IAM systems, access controls, security and risk management, and security governance fundamentals.
• Familiarity with administering directory services, Windows and Azure AD, SSO, MFA, and role-based access control (RBAC).
• Ideally familiar with one or more regulatory requirements and laws such as HIPAA or PCI. Additionally, experience in NIST preferred.
• Preferable experience with one or more scripting languages (e.g., Python, Java, Powershell, Bash)
• Knowledge and experience administering modern IAM tools such as IGA systems, privileged account management, MFA, etc.
• Ability to manage time and tasks in a rapidly changing and fast paced environment.
• Strong written and oral communication skills across varying levels of the organization.
• Ability to communicate with end users, vendors, and management effectively and ability to document procedures and processes.

Licenses and Certifications

• Preferred: Certified Information Security Manager - Information Systems Audit and Control Association
• Preferred: Certified Information Systems Auditor (CISA)
• Preferred: Certified Information Systems Security Professional - International Information System Security Certification Consortium
• Preferred: GIAC Security Essentials (GSEC) certification
• Preferred: Systems Security Certified Practitioner certification (SSCP)

Supervision Provided by this Position

• There are no supervisory responsibilities assigned to this position. May take a lead role in projects.

Physical Demands

• Remote work with high availability during business hours and participation in the after-hours on-call rotation.
• Be available for onsite work as needs require.
• Must be highly responsive by phone, in MS Teams, and ServiceNow ticketing.
• Occasional travel to MLH facilities may be required.
• Must maintain strict confidentiality and uphold the highest standards of professionalism and trust.

Our Associates are passionate about what they do, the service they provide and the patients they serve. We value family, team and a Power of One culture that requires commitment to the highest standards of care and unity.

Boasting one of the South's largest medical centers, Memphis blends a friendly community, a thriving and growing downtown, and a low cost of living. We see each day as a new opportunity to make a difference in the lives of the people in our community.