Job Description & Details
This is a solid operational Identity and Access Management role where you will act as the gatekeeper for system permissions while helping untangle everyday access headaches. If you like keeping security tight without turning into a bureaucratic bottleneck, this gig gives you plenty of room to improve processes and handle provisioning workflows.
What You'll Actually Be Doing
You will spend a good chunk of your day living in ticketing and request queues, managing access lifecycles for internal colleagues and contractors. Expect to handle tricky termination and transfer processes, run annual access certifications, and occasionally jump on after-hours on-call rotations to mitigate urgent security or infrastructure issues. You will also interface directly with development teams to explain why certain access requests got denied and consult on how they should properly structure permissions for their apps.
The Core Tech Stack
You need a strong grasp of enterprise IAM and ticketing systems, specifically Service Now for request routing and Active Directory or Azure for directory services. Having hands-on reps with identity governance tools like SailPoint and privileged access management solutions like CyberArk will make or break your day-to-day. The team relies heavily on your ability to enforce least-privilege access and SOX compliance controls without breaking production velocity.
Interview Expectations
The hiring manager will likely present a scenario where a critical business user needs high-level database or application access immediately, bypassing standard protocol. They want to see how you balance security compliance and audit requirements with operational urgency. They may also test your knowledge of segregation of duties by asking how you would handle an access conflict where a single user can both create and approve financial transactions.
Application Advice
Skip the generic IT administration fluff and tailor your resume to emphasize your exact experience with access governance frameworks, role-based access control, and audit readiness. Make sure acronyms like SOX, RBAC, and PAM stand out clearly alongside tool names like SailPoint, Service Now, and Azure AD so you easily clear the initial ATS filters.