Senior Identity Analyst - 10 Month Contract (Hybrid)

The Senior Identity Analyst serves as a trusted technical advisor to project and product teams across the organization, ensuring identity and security standards are consistently implemented and maintained. This role requires exceptional communication skills and the ability to collaborate effectively with diverse stakeholders - from technical teams to business leaders - who depend on your expertise to design and deploy identity solutions that effectively mitigate security threats.

In this position, you'll champion modern zero-trust principles, guiding teams in developing robust security controls while staying ahead of evolving industry trends, emerging threats, and innovative technologies. You'll play a key role in building awareness and understanding of our Identity and Access Management (IAM) program across all business lines, making complex security concepts accessible and actionable for varied audiences.

The ideal candidate thrives in Agile environments and leverages collaborative tools to seamlessly integrate identity management into daily workflows, driving both security excellence and operational efficiency.

This is a 9-month contract position running through the end of 2026, with potential for extension

What you'll be doing:

• Review, develop and implement security measures for the protection of identities, computer systems, networks, and information  

• Conduct risk assessments: Senior Identity Analysts must be able to identify potential security risks and vulnerabilities in the organization's digital infrastructure and develop strategies to mitigate those risks  

• Define system security requirements in a zero-trust environment and prepare reports on your results  

• Review and document standard operating procedures, authentication and authorization patterns and identity lifecycles  

• Prepare detailed reports including assessment-based findings٫ outcomes and propositions for further identity, access and system security enhancement  

• Ability to adapt to a varied audience and work well with others is a key component in this role, as project teams will rely on the resource’s experience and analytical acting as the principal IAM security advisor to guide secure architecture decisions and drive consensus  

• Additional responsibilities may include involvement in the implementation of new security solutions, leading in the creation of security architecture documentation and/or maintenance of policies, standards, baselines, and guidelines.   
   

Strategy & Planning  

• Architect and champion, the target-state security architecture for the organization’s internal and external IAM landscape, corporate technology, and supporting infrastructure, ensuring alignment with business objectives  

• Develop and maintain a comprehensive identity strategy, roadmaps, guide identity architecture decisions and drive consensus  

• Develop and maintain processes to support activities such as Threat Modelling and Risk assessments at both a product and project level  

• Perform a leadership role in the planning and design of enterprise identity architecture, and coordinate with system owners, control providers, and other stakeholders on the allocation of identity controls as system-specific, hybrid, or common controls.  

• Perform a leadership role in the creation of enterprise identity documents (architecture blueprints, policies, standards, baselines, guidelines and procedures) Provide oversight and contribute to the design and deployment of technology solutions within Central 1 to ensure they are carried out following industry standard zero-trust best practices.  
   

Acquisition & Deployment  

• Design tooling and platforms to provide capabilities within the identity and access arena   

• Develop and maintain partnerships with Identity vendors to support organisational goals  

• Maintain up-to-date detailed knowledge of the identity industry including awareness of new or revised identity solutions, improved authentication and authorization processes and the development of new attacks and threat vectors.  

• Recommend additional identity and security solutions or enhancements to existing identity solutions to improve overall enterprise security.  
   

Operational Management  

• Participate with investigations into problematic identity activity, provide escalation support to identity and access issues, validate fixes provided to mitigate existing vulnerabilities.  

• Perform reviews, identify gaps in identity and access architecture and controls, and develop an identity governance plan.  

• Provide input on identity and zero-trust requirements to be included in statements of work and other appropriate documents.  

• Evaluate identity and access architectures, user management processes, identity lifecycles, access controls and designs to determine the adequacy of design and architecture proposed or provided in response to requirements contained in acquisition documents.  

What you'll have

• University degree and 5+ years Information Technology related work experience in an enterprise environment, ideally with 3 or more years spent working in Identity and Access Management.  

• One or more of the following certifications is preferred:  

• Azure - Microsoft Certified: Identity and Access Administrator Associate  
   

Knowledge & Experience  

• Analyze and contribute to target state IAM and identity governance requirements.  

• Analyze and contribute to identity strategy, roadmaps, and identity documentation.  

• Experience designing and building Public-Key Infrastructure (PKI) platforms to support secure applications (e.g., mTLS, SSL traffic)  

• Strong Experience with Single sign-on (SSO) protocols, SAML, oAuth/OIDC, 3rd party integration and service providers, API authentication and authorization  

• Strong experience with RBAC, ABAC, identity lifecycle, delegated identity management, identity synchronization  

• Design and implement identity tools supporting IAM, IGA, and CIAM functions  

• Experience designing the integration of hardware and software solutions, deploying and supporting complex web application in a highly available enterprise environment  

• Experience designing countermeasures to identified security risks, implementing identity governance controls, and completing technical risk assessments  

• Deep understanding and knowledge Active Directory, and experience with cloud platforms such as AWS and Azure  

• Experience in secure automation of identity management tasks in PowerShell or equivalent  

• Strong understanding of reverse proxies, DNS, TCP/IP, and other network administration protocols.  

• Strong understanding of compliance frameworks including ISO 27001 and NIST (including Zero Trust Architecture), CIS,   
   

Personal Attributes  

• Experience coaching and leading others in Identity, Governance and Access  

• Proven analytical and problem-solving abilities.  

• Ability to effectively prioritize and execute tasks in a high-pressure environment.  

• Good written, oral, and interpersonal communication skills.  

• Ability to conduct research into identity issues and products as required.  

• Ability to present ideas in business-friendly and user-friendly manner.  

• Highly self-motivated and directed.  

• Keen attention to detail.  

• Team-oriented and skilled in working within a collaborative environment.  
  Hourly Rate: $70.00 - $80.00/hour

  #LI-Hybrid

  Central 1 does not use Artificial Intelligence (AI) technology to screen, assess, or select applicants during our recruitment process. This job posting is for an existing, specific vacancy within our organization. All applications will be considered exclusively for the position described in this posting.

  Central 1 is an equal opportunity employer and committed to building an inclusive workforce by creating an environment where everyone feels like they belong and has the opportunity to be successful. We welcome all applicants to join our diverse workforce and we will provide an accessible candidate experience including, but not limited to accommodations to interview sites and alternate formats upon request to our Recruitment team.