Business Analyst - Entra ID/SSO

Job Title: Business Analyst - Entra ID/SSO

Job Location: Deerfield Beach FL

Key Responsibilities:

• Analyze AD / Entra ID identity data, group memberships, and access patterns to identify inconsistencies, redundant permissions, and remediation needs.

• Define and document rule-based access policies, group standards, and governance models.

• Partner with IAM engineers and application teams to redesign group structures for cleaner and more predictable access flows.

• Support SSO integration requirements for SailPoint and CyberArk-based app integrations.

• Assist in mapping entitlements and ensuring correct provisioning, de-provisioning, and lifecycle rules.

• Work with security, IAM, and application stakeholders to gather functional and non-functional requirements related to access, identity data, SSO, and policy changes.

• Translate complex IAM requirements into clear user stories, acceptance criteria, workflows, and process documentation.

• Participate in and facilitate workshops, interviews, and working sessions to align on future-state access models.

• Perform detailed data analysis on identity attributes, group memberships, entitlements, and access logs.

• Document data flows, mappings, and integration points across IAM systems.

• Validate data quality, identify anomalies, and support cleanup efforts.

• Create test plans, test scripts, and validation scenarios for AD/Entra, SailPoint, and CyberArk IAM workflows.

• Support UAT and coordinate defect tracking with technical teams.

• Ensure access rules and SSO flows behave according to the new governance policies.

• Serve as the conduit between IAM engineering, InfoSec, Application Owners, and business stakeholders.

• Communicate risks, impacts, and progress related to access remediation and policy changes.

• Assist teams in understanding the downstream implications of identity and access changes.

Required Qualifications:

• 5 years of Business Analyst experience with strong exposure to IAM, AD/Entra ID, SSO, access governance, or security remediation projects.

• Knowledge of Microsoft Active Directory / Entra ID group structures, attribute management, and lifecycle events.

• Demonstrated ability to analyze complex identity data sets and interpret access patterns.

• Experience supporting projects involving SailPoint, CyberArk, or similar access management tools.

• Strong ability to document rules, policies, user stories, workflows, and system processes.

• Experience supporting integrations and reviewing access-related requirements for applications.

• Solid understanding of SDLC, Agile methodologies, and BA best practices.

• Excellent communication skills with the ability to translate technical access concepts into business-friendly language.

• Highly organized, self-directed, and comfortable working across multiple workstreams.

Preferred Qualifications:

• Experience with IAM remediation programs, audits, or compliance-driven access cleanup.

• Working knowledge of SQL for identity/data analysis.

• Experience with data mapping, data quality checks, or access data profiling.

• CBAP, CDMP, or related BA certifications.