Senior Administrator - Identity & Access Management ( IS2 )

Roles and Responsibilities:

1. User Provisioning and De-provisioning:
   • Assist in creating, modifying, and deactivating user accounts in Active Directory, Okta, SailPoint, and LDAP.
   • Ensure that user access is provisioned accurately based on roles, departments, and permissions defined in the access control policies.
   • Process user access requests and update account information, including roles, permissions, and entitlements in the relevant IAM systems.
2. Password Management Support:
   • Assist in password reset requests for Active Directory, Okta, and other connected systems.
   • Troubleshoot basic user login issues related to password complexity or account lockouts.
   • Ensure password policies (e.g., complexity, expiration) are enforced in the IAM tools.
3. Access Control Support:
   • Help in reviewing user roles and permissions in Active Directory and Okta to ensure compliance with access control policies.
   • Assist in adding/removing users from groups in Active Directory and Okta according to the organization's access control policies.
   • Help with the review of user access rights and entitlements during scheduled audits.
4. Identity Lifecycle Management:
   • Assist in monitoring the identity lifecycle, including user onboarding, role assignments, and offboarding in systems like SailPoint, Okta, and Active Directory.
   • Help with automating identity lifecycle management tasks using SailPoint and Okta workflows for user provisioning and de-provisioning.
5. Access Requests and Approvals:
   • Support in managing and processing user access requests, including access to systems, applications, and resources.
   • Coordinate with business units and managers for approval workflows for user access requests in SailPoint and Okta.
6. Incident and Issue Resolution:
   • Handle basic IAM incidents, including troubleshooting user access issues, password resets, and account lockouts in Okta, Active Directory, and LDAP.
   • Escalate more complex issues to L2 or L3 IAM analysts for resolution.
   • Document and track IAM incidents and issues in the ticketing system (e.g., ServiceNow).
7. Documentation and Knowledge Base Management:
   • Document IAM processes, procedures, and troubleshooting steps to ensure consistent practices.
   • Help maintain and update internal documentation, including user guides, standard operating procedures, and knowledge base articles related to IAM systems.
8. End-User Support and Training:
   • Provide basic support to end-users regarding IAM tools, including how to access systems, reset passwords, and follow company security policies.
   • Communicate IAM-related changes or updates to end-users in a clear and concise manner.
   • Offer guidance on accessing resources, setting up multi-factor authentication (MFA), or using Single Sign-On (SSO) features.
9. System and Access Audits:
   • Assist with periodic audits of user access in Active Directory, Okta, SailPoint, and LDAP.
   • Perform tasks related to ensuring compliance with internal policies and external regulations (e.g., ensure inactive accounts are properly managed).
   • Assist in user access reviews by verifying access rights based on roles and responsibilities.
10. Basic Troubleshooting:
    • Perform initial troubleshooting for common IAM issues such as login failures, access denials, and synchronization issues between SailPoint, Okta, Active Directory, and LDAP.
    • Escalate unresolved or complex issues to higher-level analysts.

Skills and Experience Required for IAM L1/L2 Analyst:

• Basic IAM Tool Knowledge: Familiarity with tools like SailPoint, Okta, Active Directory, and LDAP
• Technical Skills: Basic understanding of identity and access management concepts, authentication methods (like SSO, MFA), and directory services (LDAP and AD).
• Troubleshooting Skills: Ability to perform basic troubleshooting for IAM issues like user access problems or password resets.
• Security Awareness: Understanding of basic security principles, including least privilege, role-based access, and compliance.
• Customer Service Skills: Ability to interact with end-users effectively, addressing access-related issues in a timely and professional manner.
• Attention to Detail: High attention to detail for tasks like provisioning accounts, managing permissions, and handling sensitive data securely.

Roles and Responsibilities:

1. User Provisioning and De-provisioning:
   • Assist in creating, modifying, and deactivating user accounts in Active Directory, Okta, SailPoint, and LDAP.
   • Ensure that user access is provisioned accurately based on roles, departments, and permissions defined in the access control policies.
   • Process user access requests and update account information, including roles, permissions, and entitlements in the relevant IAM systems.
2. Password Management Support:
   • Assist in password reset requests for Active Directory, Okta, and other connected systems.
   • Troubleshoot basic user login issues related to password complexity or account lockouts.
   • Ensure password policies (e.g., complexity, expiration) are enforced in the IAM tools.
3. Access Control Support:
   • Help in reviewing user roles and permissions in Active Directory and Okta to ensure compliance with access control policies.
   • Assist in adding/removing users from groups in Active Directory and Okta according to the organization's access control policies.
   • Help with the review of user access rights and entitlements during scheduled audits.
4. Identity Lifecycle Management:
   • Assist in monitoring the identity lifecycle, including user onboarding, role assignments, and offboarding in systems like SailPoint, Okta, and Active Directory.
   • Help with automating identity lifecycle management tasks using SailPoint and Okta workflows for user provisioning and de-provisioning.
5. Access Requests and Approvals:
   • Support in managing and processing user access requests, including access to systems, applications, and resources.
   • Coordinate with business units and managers for approval workflows for user access requests in SailPoint and Okta.
6. Incident and Issue Resolution:
   • Handle basic IAM incidents, including troubleshooting user access issues, password resets, and account lockouts in Okta, Active Directory, and LDAP.
   • Escalate more complex issues to L2 or L3 IAM analysts for resolution.
   • Document and track IAM incidents and issues in the ticketing system (e.g., ServiceNow).
7. Documentation and Knowledge Base Management:
   • Document IAM processes, procedures, and troubleshooting steps to ensure consistent practices.
   • Help maintain and update internal documentation, including user guides, standard operating procedures, and knowledge base articles related to IAM systems.
8. End-User Support and Training:
   • Provide basic support to end-users regarding IAM tools, including how to access systems, reset passwords, and follow company security policies.
   • Communicate IAM-related changes or updates to end-users in a clear and concise manner.
   • Offer guidance on accessing resources, setting up multi-factor authentication (MFA), or using Single Sign-On (SSO) features.
9. System and Access Audits:
   • Assist with periodic audits of user access in Active Directory, Okta, SailPoint, and LDAP.
   • Perform tasks related to ensuring compliance with internal policies and external regulations (e.g., ensure inactive accounts are properly managed).
   • Assist in user access reviews by verifying access rights based on roles and responsibilities.
10. Basic Troubleshooting:
    • Perform initial troubleshooting for common IAM issues such as login failures, access denials, and synchronization issues between SailPoint, Okta, Active Directory, and LDAP.
    • Escalate unresolved or complex issues to higher-level analysts.

Skills and Experience Required for IAM L1/L2 Analyst:

• Basic IAM Tool Knowledge: Familiarity with tools like SailPoint, Okta, Active Directory, and LDAP
• Technical Skills: Basic understanding of identity and access management concepts, authentication methods (like SSO, MFA), and directory services (LDAP and AD).
• Troubleshooting Skills: Ability to perform basic troubleshooting for IAM issues like user access problems or password resets.
• Security Awareness: Understanding of basic security principles, including least privilege, role-based access, and compliance.
• Customer Service Skills: Ability to interact with end-users effectively, addressing access-related issues in a timely and professional manner.
• Attention to Detail: High attention to detail for tasks like provisioning accounts, managing permissions, and handling sensitive data securely.

Created On

06-Aug-2026