Identity & Access Management Sr Analyst

Job Summary

We are seeking an Identity and Access Management Sr. Analyst to serve as a member of a Global Security Team. The candidate will be responsible for assisting with daily operational tasks including administration within Active Directory, Azure AD, CyberArk, OKTA, Saviynt IGA and other identity governance and administration related tasks as assigned. This is a remote/virtual position that can be based from anywhere in the US.

Major Tasks and Responsibilities:

• Manage user, group, and system objects through the lifecycle including provisioning, updates, deactivation, and deletion in accordance with established processes.
• Collaborate with IT teams to ensure that user and system account roles are designed considering principles of least privilege and segregation of duties
• Design, document, and communicate Identity and Access Management standards, processes, procedures, workflows and associated metrics
• Act as an escalation point and conduct root cause analysis and makes recommendations to improve IAM processes or prevent future occurrence of issues
• Ensure that IAM services are closely monitored for availability and resiliency
• Assist with Identity and Access Management related initiatives
• Identify and evaluate complex business and technology risks, map to internal controls which mitigate risks, and relay opportunities for automation/transformation improvements.

At AECOM, we're delivering a better world.

We believe infrastructure creates opportunity for everyone. Whether it's improving your commute, keeping the lights on, providing access to clean water or transforming skylines, our work helps people and communities thrive.

Our clients trust us to bring together the best people, ideas, technical expertise and digital solutions to our work in transportation, buildings, water, the environment and new energy. We're one global team - over 50,000 strong - driven by a common purpose to deliver a better world.

Minimum Requirements

• BA/BS plus at least 6 years of focused experience in Identity and Access Management, or demonstrated equivalency of experience and/or education
• Technical experience scripting within Active Directory security provisioning, administration, and configuration.
• Strong fundamentals of Federation, Privileged Access Management, Authentication and Authorization, strong authentication and familiarity with other IAM workflows
• Recognition of security events and threats via correlation of Security event ID's using analytics
• Ability to prioritize work and complete assignments accurately and on time
• Experience with reporting and reporting tools
• Experience implementing access control (SAML 2.0, OAUTH2, OpenID Connect)

Preferred Qualifications

• Experience with OKTA, CyberArk, and/or Saviynt IGA (or other IGA tool) is strongly preferred.

Additional Information:

• Due to the remote nature of this position, relocation assistance is not available
• Sponsorship for US work authorization is not available for this position.

Offered rate of compensation (Colorado locations only) will be based on individual education, qualifications, experience, and work location. The salary range for this position is $79,000 - $120,000.

AECOM is proud to offer a comprehensive benefits program to meet the diverse needs of our employees. Depending on your employment status, AECOM benefits may include medical, dental, vision, life, AD&D and disability benefits, paid time off, leaves of absence, voluntary benefits, perks, wellness and global well-being, and global EAP, Business Travel and Service Awards programs.

What We Offer

We will give you the flexibility you need to do your best work with hybrid work options. Whether you're working from an AECOM office, remote location or at a client site, you will be working in a dynamic environment where your integrity, entrepreneurial spirit and pioneering mindset are championed.

You will help us foster a culture of equity, diversity and inclusion - a safe and respectful workplace, where we invite everyone to bring their whole selves to work using their unique talents, backgrounds and expertise to create transformational outcomes for our clients.

We will encourage you to grow and develop your career with us through our technical and professional development programs and diverse career opportunities. We believe in leadership at all levels. No matter where you sit in the organization you can make a lasting impact on the projects you work on, the teams and committees you join and our business.

We offer competitive pay and benefits, well-being programs to support you and your family, and the development resources you need to advance your career.

When you join us, you will connect and collaborate with a global network of experts - planners, designers, engineers, scientists, consultants, program and construction managers - leading the change toward a more sustainable and equitable future. Join us and let's get started.

As an Equal Opportunity Employer, we believe in each person's potential, and we'll help you reach yours.

Job Category Information Technology

Business Line Corporate

Business Group Corporate

Country United States of America

Position Status Full Time

Requisition/Vacancy No. 270095BR

Additional Locations US - Arlington, VA - 3101 Wilson Blvd, US - Atlanta, GA - 1360 Peachtree St NE, US - Boston, MA - One Federal St, US - Chicago, IL - 303 E Wacker Drive, US - Dallas, TX - 13355 Noel Road, US - Denver, CO - 7595 East Technology Way, US - Los Angeles, CA - 300 S Grand Ave, US - Raleigh, NC - 5438 Wade Park Boulevard, Suite 200, US - Seattle, WA - 1111 3rd Avenue, US - Tampa, FL - 7650 W Courtney Campbell Causeway

Virtual: Yes

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.