IT Security Analyst - RBAC

Role Overview

Essential Job Duties

• Design and implement application-specific RBAC models with application owners and IT teams.
• Enroll applications in SailPoint IdentityIQ and define roles, entitlements, and provisioning or de-provisioning workflows using REST APIs.
• Perform application-level role mining and role engineering.
• Develop workflows, rules, and forms for role assignment, approval, and certification.
• Maintain RBAC governance and current role catalogs for onboarded applications.
• Identify excess access, orphaned entitlements, and missing SoD controls and drive remediation.
• Support application access certification and attestation campaigns.
• Implement least-privilege and SoD principles in role designs.
• Support IAM/IAG tools, SailPoint upgrades, patching, reporting, analytics, and certifications.
• Support SSO/MFA-integrated access and assess access-request risk.
• Monitor role coverage, SoD violations, and certification-completion KPIs.

Required Skills and Experience

• 5+ years of access governance experience focused on RBAC design for business applications.
• At least 5 years of IAM/IAG application enrollment, access controls, attestations, certifications, and audit support.
• Experience translating application-owner access requirements into role definitions and entitlement structures.
• Knowledge of identity directories, federation, provisioning, and SSO.
• Knowledge of network systems, operating systems, databases, and change control related to application access.
• Experience with application access reviews, SoD, and IT audit or assessment activities.
• Experience delivering RBAC projects across multiple applications and stakeholder groups.
• Strong documentation and communication skills.

Education

• Bachelor's or master's degree in a technical field, or equivalent additional experience.

Preferred Skills

• SailPoint IdentityIQ experience is preferred.
• Java development or shell/Perl scripting is a plus.
• Identity access management and role-based access controls are identified as must-have skills.

Workplace

• The posting is labeled hybrid.
• The role is listed in Bengaluru, India.