IAM Governance Analyst

The Identity Access Management Governance Analyst supports enterprise IAM governance across Active Directory, Microsoft Entra ID, and integrated applications. This role helps maintain clear standards for access structures, group ownership, naming, lifecycle management, and periodic reviews so that access remains understandable, auditable, and maintainable over time. The analyst partners with Security, Infrastructure, Application, Compliance, Audit, and support teams to reduce access risk, document control evidence, and improve IAM practices without serving as the primary day-to-day provisioning function.

Responsibilities: 

• Support standards for IAM group creation, ownership, naming, and lifecycle management across enterprise identity platforms.
• Maintain inventories of IAM groups, access models, owners, and dependencies; identify legacy, orphaned, redundant, or high-risk access for review.
• Assist with access rationalization efforts that improve least-privilege alignment, segregation of duties, audit readiness, and operational clarity.
• Coordinate periodic access reviews and certifications, including preparation of evidence, follow-up with business owners, and documentation of outcomes.
• Partner with application, infrastructure, security, compliance, and audit teams to evaluate access design and support sustainable governance decisions.
• Document group standards, ownership models, review procedures, runbooks, decision records, and support handoff materials.
• Analyze IAM data to identify trends, gaps, exceptions, and control risks; communicate findings in clear, actionable language for technical and non-technical stakeholders.
• Support implementation and maintenance of role-based access control practices, privileged access processes, and identity lifecycle controls.
• Assist with Microsoft Entra ID / Azure AD, Active Directory, and integrated application governance activities, including access model reviews and policy alignment.
• Participate in change management activities related to IAM governance, ensuring changes are documented, traceable, and aligned with internal control requirements.
• Provide support during internal and external audits by gathering evidence, explaining IAM governance processes, and helping remediate identified gaps.
• Collaborate on process improvements that reduce future access sprawl and improve consistency, accountability, and maintainability of IAM structures.
• Troubleshoot and research access governance issues, escalating complex design or control decisions to senior engineers, security architecture, or leadership as appropriate.
• Prepare clear status updates, process documentation, and stakeholder communications related to IAM governance initiatives.
• Contribute to team knowledge sharing and continuous improvement of IAM standards, procedures, and controls.

POSITION REQUIREMENTS:

• 3 or more years of experience in Identity and Access Management, information security, IT operations, application administration, audit support, or related technology/control environment.
• Working knowledge of IAM concepts, including identity lifecycle management, access reviews, role-based access control, least privilege, segregation of duties, and privileged access management.
• Experience working with Microsoft Entra ID / Azure AD, Active Directory, Microsoft 365, or similar enterprise identity and directory platforms.
• Ability to analyze groups, permissions, ownership, and access dependencies and translate findings into practical governance recommendations.
  Understanding audit, privacy, regulatory, and internal control objectives related to access management and identity governance.
• Familiarity with authentication and identity integration concepts such as SSO, MFA, SAML, OAuth, OpenID Connect, SCIM, and federation is preferred.
• Experience documenting processes, procedures, standards, and control evidence in a clear and maintainable manner.
• Ability to collaborate with Security, Infrastructure, Application, Audit, Compliance, and business stakeholders to resolve access governance questions.
• Strong attention to detail, data quality, follow-through, and organizational skills when managing inventories, review cycles, and remediation tracking
• Ability to communicate technical access concepts in clear language for both technical and non-technical audiences.
• Familiarity with scripting, reporting, Microsoft Graph, PowerShell, Excel, or data analysis tools is preferred but not required.
• Experience with identity governance platforms such as SailPoint, Saviynt, Microsoft Entra ID Governance, or similar solutions is a plus.
• Experience working in structured change management, incident/problem management, or Agile delivery environments is preferred.
• Availability to provide core support coverage Monday-Friday, 8:00 a.m.-5:00 p.m., with the ability to support occasional escalations or time-sensitive governance activities outside normal business hours as needed.

• Bachelor's degree in Computer Science, Information Systems, Business, or related field.
• Relevant cloud and identity certifications (vendor‑neutral or vendor‑specific), such as identity administration or cloud security engineering credentials.

Online, on campus and in the workplace, we provide higher education and training to our country’s heroes – military service members, veterans, nurses, government employees, and motivated professionals that want to make a difference. American Public Education, Inc. educates service-minded students, ranging from the military, public service, federal agencies, and nursing communities, through American Public University System (APUS), Hondros College of Nursing (HCON), and Rasmussen University.

It is the policy of American Public Education, Inc. (APEI) to afford equal opportunity to all qualified persons.  We treat all qualified individuals equally as to their recruitment, hiring, assignments, advancements, compensation, and all other terms and conditions of employment. American Public Education, Inc. does not discriminate on the basis of race, color, religion, creed, sex, age, national origin, sexual orientation, or physical, mental, or sensory disability, or any other characteristic protected by law.

If you are a resident of a state with designated pay transparency requirements and this role is available remotely, you may be eligible to receive additional information about the compensation and benefits for this role, which we will provide upon request.  Please send an email to recruiting@apei.com.