Business Analyst - Identity & Access Management (IAM) / Privileged Access Management (PAM)
We are seeking a self-driven Business Analyst with deep expertise in Identity & Access Management (IAM) and Privileged Access Management (PAM). In this role, you will translate business needs into scalable security solutions, ensuring alignment between stakeholders and engineering teams. The ideal candidate will have strong analytical and documentation skills and a solid understanding of IAM concepts, architecture patterns, and policy-driven access models.
Req: 1028403719
Responsibilities
- Gather, analyse, and document business and functional requirements with minimal daily oversight
- Collaborate with business stakeholders, security architects, and engineering teams to define PAM use cases and access control models
- Translate business requirements into functional specifications for privileged access controls, workflows, and acceptance criteria
- Facilitate workshops to identify privileged access scenarios across infrastructure, applications, and cloud platforms
- Define and document privileged account types, access levels, and entitlements (e.g., admin, service accounts, break-glass access)
- Work with engineering teams to define onboarding requirements for privileged accounts into vaults and access control systems
- Partner with compliance and risk teams to ensure policies meet regulatory and audit expectations, including traceability and reporting
- Support user acceptance testing (UAT) by defining test scenarios, validating outcomes, and ensuring alignment with business intent
- Maintain clear and structured documentation, including BRDs, FRDs, process flows, and decision matrices
Requirements
- 5–8+ years of experience as a Business Analyst in the IAM/Security domain
- Strong experience with PAM implementations
- Understanding of PAM architecture components such as vaults, session managers, credential providers, and privileged session monitoring
- Proficiency in documentation and analysis tools (e.g., Confluence, JIRA, Visio)
- Strong understanding of IAM concepts including SSO, Federation (SAML/OIDC), MFA, Directory Services, and access governance
- Ability to work effectively with cross-functional teams including security, engineering, product, and compliance
- Excellent communication and stakeholder management skills
