Job Descriptions

Other Titles Include

• Access management analyst
• System analyst
• Identity, credentials and access management (ICAM) specialist

Note: This role is most commonly found in large or medium-sized organizations. 

Reporting relationship

To be completed by the user of this job description as appropriate

Job purpose / summary

Provides ongoing support to identity, credentials, access and authentication management in support of organizational IT security.

Duties and responsibilities

• Identify client requirements and propose technical solutions
• Model and map users to resources (e.g. role based)
• Install, configure, operate, maintain and monitor related applications
• Deploy, configure and manage user provisioning including identity synchronization, auto-provisioning and automatic access deactivation, self-service security request approvals workflow and consolidated reporting
• Configure and manage enterprise and web-based access management solutions (single sign on, password management, authentication & authorization, delegated administration)
• Analyze patterns or trends in incidents for further resolution
• Manage identity change-request approval processes
• Audit, log and report user life-cycle management steps against access control list on managed platforms
• Configure and manage federated identity, credentials, access management tools in compliance with security policy, standards and procedures
• Complete tasks related to authorization and authentication in physical and logical environments
• Develop, deliver, and oversee related cybersecurity training material and educational efforts related to role

Tools and Technology

• Identity and access management systems
• Directory services
• Authentication tools and services
• Security event and incident management systems and/or incident reporting systems and networks

Competencies

KSAs applied at the basic level:

• Identity, credential and access management architectures and standards
• Related application life-cycle processes
• Mapping and modeling credentials
• Policy-based and risk-adaptive access controls
• Developing and applying user credential management system
• Organizational analysis of user and business trends
• Client consultation and problem resolution

KSAs applied at an advanced level:

• Network access, identity, and access management protocols, tools and procedures
• Authentication, authorization, and access control methods
• Install, configure, operate, maintain and monitor related applications
• Developing and applying security system access controls.
• Maintaining directory services
• Organizational information technology (IT) user security policies (e.g., account creation, password rules, access control)

Direct reports (if appropriate)

To be completed by the user of this job description as appropriate

Qualifications

Education. College diploma in IT field or equivalent training and experience. 

Training in relevant identity, credentials, access management and authentication policies, protocols, tools and procedures.

Developing and applying user credential management system.

Certifications.

To be completed by the user of this job description as appropriate

Other relevant qualifications. This is an often an entry-level job to the security domain after gained experience with network or system administration access management and credentials. With additional training and experience there is potential for more technically or operationally focused roles as well as management opportunities.

Key Attributes.

To be completed by the user of this job description as appropriate

Experience. Experience in managing directory services and working in a security environment.

Working conditions (if required)

If the job requires a person to work in special working conditions this should be stated in the job description. Special working conditions cover a range of circumstances from regular evening and weekend work, shift work, working outdoors, working with challenging clients, and so forth.

Physical requirements (if appropriate)

If the job is physically demanding, this should be stated in the job description. A physically demanding job is one where the incumbent is required to stand for extended periods of time, lift heavy objects on a regular basis, do repetitive tasks with few breaks, and so forth.