Mid Level Identity and Access Management Analyst Jobs
Mid level identity and access management analyst jobs go to professionals ready to own IAM projects end to end, make access control decisions with limited oversight, and guide junior team members through implementation. Roles are distributed across on-site, remote, and hybrid settings in Technology & Software, Accounting & Auditing, and Energy, with employers like TikTok USDS Joint Venture, TikTok, and DigitalOcean hiring at this level now.
Find JobsOverview
Showing 5 of 23+ Mid Level Identity and Access Management Analyst jobs
Identity is the control plane of Davidson's technology environment. Every login, every SSO handshake, every automated account action, and, increasingly, every agent acting on institutional systems passes through infrastructure this role owns. The Identity & Access Management Engineer is accountable for that infrastructure end to end: the identity provider and single sign-on integrations, the hybrid directory (Active Directory and Entra ID), account management in RapidIdentity Cloud, multi-factor authentication (Duo), certificate and trust infrastructure (InCommon), and the provisioning and deprovisioning workflows that keep access aligned with each person's actual role at the college.
The role works in close partnership with Platform Engineering, which builds and operates the scripted account-lifecycle integrations against architecture and requirements this role defines; with Information Security, which sets policy this role enforces and monitors (including identity threat detection and response); and with campus data owners (HR, Registrar) whose systems feed identity. As Davidson extends its agentic campus, this role extends identity standards to non-human actors, including service accounts, API access, and agents, so that automation grows without eroding accountability. As a member of T&I, the incumbent upholds the department's mission to remove barriers between people and Davidson's primary purpose through authentic partnerships and purposeful technology.
Specifically... Identity and Access Management Engineering (45%)
- Administer and evolve the identity provider and single sign-on environment (SAML, OIDC, OAuth), including service-provider integrations for campus and cloud applications.
- Own identity lifecycle requirements and design: provisioning, role and affiliation changes, and deprovisioning. Validate the automated account-lifecycle integrations, troubleshoot and fix existing RapidIdentity action sets and directory synchronization connectors, and partner with Platform Engineering, which does new development.
- Administer RapidIdentity Cloud as the college's account management platform, including account creation, updates, and removal, along with related identity platforms; manage role- and group-based access models across systems.
- Administer Duo for multi-factor authentication, and implement and maintain conditional access and privileged access controls alongside it.
- Maintain certificate and trust infrastructure, including InCommon certificate services, application and SAML signing certificates, and internal PKI touchpoints. Automate renewals and expiration alerting so recurring certificate work does not depend on manual tracking.
- Resolve escalated identity requests, including access, MFA, and lifecycle exceptions, and use the patterns in those requests to remove manual steps through automation and self-service.
- Design and run periodic access reviews and support audit and compliance requests (for example, FERPA and GLBA driven access controls).
Directory and Authentication Services (25%)
- Administer the hybrid directory environment: Active Directory, Entra ID, directory synchronization, and group policy relevant to identity and access.
- Manage authentication health: monitoring, alert response (including identity threat intelligence tooling), and incident participation with Information Security.
- Maintain integration points between the directory and downstream systems (email, storage, org-group-driven entitlements) and troubleshoot access inconsistencies.
Governance, Consultation, and Documentation (10%)
- Serve as T&I's consulted expert on identity for projects, procurements, and architecture reviews; extend identity standards to service accounts, API access, and agents on the agentic platform.
- Consult with campus offices on access needs and data-owner responsibilities.
- Maintain documentation, runbooks, and knowledge transfer so identity operations are diagnosable and never dependent on one person.
Systems Administration (20%)
- Maintain, patch, and secure the servers that run identity processes, such as the directory synchronization servers and the servers supporting the identity platform, on premises and in the cloud, using the Infrastructure team's patching and monitoring tools.
- Support backup and recovery for identity systems, including restoration testing.
- Participate in documented change management (CAB) and share in the Infrastructure on-call rotation.
- Automate operational tasks with scripting and AI-assisted development techniques.
- General server and storage administration remains with the Systems team; this role's systems work is limited to the systems that support identity.
Requirements
- Bachelor's degree or equivalent combination of education and relevant experience.
- 5+ years in systems administration, identity management, or a related discipline, with hands-on identity provider and SSO administration.
- Strong working knowledge of Active Directory and Entra ID, including hybrid synchronization and conditional access.
- Practical understanding of identity protocols and standards: SAML, OIDC/OAuth, LDAP, and SCIM.
- Scripting proficiency (PowerShell, Python, or similar) for identity automation.
- Security-first mindset with experience implementing MFA (Duo or a comparable platform) and least-privilege access models.
- Clear communication with technical and non-technical audiences; strong documentation habits.
Preferences
- Experience with RapidIdentity Cloud or comparable identity lifecycle and account management suites, and with administering Duo.
- Experience with InCommon, certificate management, or PKI, including automating certificate renewal.
- Experience supporting identity for AI and agentic platforms, API access management, or service-account governance.
- Higher education experience, including FERPA and GLBA aware access design.
- Relevant certifications (for example, Microsoft Identity and Access Administrator).
- Familiarity with identity threat detection and response tooling.
Information about how to submit an application can be found at https://employment.davidson.edu .
Identity is the control plane of Davidson's technology environment. Every login, every SSO handshake, every automated account action, and, increasingly, every agent acting on institutional systems passes through infrastructure this role owns. The Identity & Access Management Engineer is accountable for that infrastructure end to end: the identity provider and single sign-on integrations, the hybrid directory (Active Directory and Entra ID), account management in RapidIdentity Cloud, multi-factor authentication (Duo), certificate and trust infrastructure (InCommon), and the provisioning and deprovisioning workflows that keep access aligned with each person's actual role at the college.
The role works in close partnership with Platform Engineering, which builds and operates the scripted account-lifecycle integrations against architecture and requirements this role defines; with Information Security, which sets policy this role enforces and monitors (including identity threat detection and response); and with campus data owners (HR, Registrar) whose systems feed identity. As Davidson extends its agentic campus, this role extends identity standards to non-human actors, including service accounts, API access, and agents, so that automation grows without eroding accountability. As a member of T&I, the incumbent upholds the department's mission to remove barriers between people and Davidson's primary purpose through authentic partnerships and purposeful technology.
Specifically... Identity and Access Management Engineering (45%)
- Administer and evolve the identity provider and single sign-on environment (SAML, OIDC, OAuth), including service-provider integrations for campus and cloud applications.
- Own identity lifecycle requirements and design: provisioning, role and affiliation changes, and deprovisioning. Validate the automated account-lifecycle integrations, troubleshoot and fix existing RapidIdentity action sets and directory synchronization connectors, and partner with Platform Engineering, which does new development.
- Administer RapidIdentity Cloud as the college's account management platform, including account creation, updates, and removal, along with related identity platforms; manage role- and group-based access models across systems.
- Administer Duo for multi-factor authentication, and implement and maintain conditional access and privileged access controls alongside it.
- Maintain certificate and trust infrastructure, including InCommon certificate services, application and SAML signing certificates, and internal PKI touchpoints. Automate renewals and expiration alerting so recurring certificate work does not depend on manual tracking.
- Resolve escalated identity requests, including access, MFA, and lifecycle exceptions, and use the patterns in those requests to remove manual steps through automation and self-service.
- Design and run periodic access reviews and support audit and compliance requests (for example, FERPA and GLBA driven access controls).
Directory and Authentication Services (25%)
- Administer the hybrid directory environment: Active Directory, Entra ID, directory synchronization, and group policy relevant to identity and access.
- Manage authentication health: monitoring, alert response (including identity threat intelligence tooling), and incident participation with Information Security.
- Maintain integration points between the directory and downstream systems (email, storage, org-group-driven entitlements) and troubleshoot access inconsistencies.
Governance, Consultation, and Documentation (10%)
- Serve as T&I's consulted expert on identity for projects, procurements, and architecture reviews; extend identity standards to service accounts, API access, and agents on the agentic platform.
- Consult with campus offices on access needs and data-owner responsibilities.
- Maintain documentation, runbooks, and knowledge transfer so identity operations are diagnosable and never dependent on one person.
Systems Administration (20%)
- Maintain, patch, and secure the servers that run identity processes, such as the directory synchronization servers and the servers supporting the identity platform, on premises and in the cloud, using the Infrastructure team's patching and monitoring tools.
- Support backup and recovery for identity systems, including restoration testing.
- Participate in documented change management (CAB) and share in the Infrastructure on-call rotation.
- Automate operational tasks with scripting and AI-assisted development techniques.
- General server and storage administration remains with the Systems team; this role's systems work is limited to the systems that support identity.
Requirements
- Bachelor's degree or equivalent combination of education and relevant experience.
- 5+ years in systems administration, identity management, or a related discipline, with hands-on identity provider and SSO administration.
- Strong working knowledge of Active Directory and Entra ID, including hybrid synchronization and conditional access.
- Practical understanding of identity protocols and standards: SAML, OIDC/OAuth, LDAP, and SCIM.
- Scripting proficiency (PowerShell, Python, or similar) for identity automation.
- Security-first mindset with experience implementing MFA (Duo or a comparable platform) and least-privilege access models.
- Clear communication with technical and non-technical audiences; strong documentation habits.
Preferences
- Experience with RapidIdentity Cloud or comparable identity lifecycle and account management suites, and with administering Duo.
- Experience with InCommon, certificate management, or PKI, including automating certificate renewal.
- Experience supporting identity for AI and agentic platforms, API access management, or service-account governance.
- Higher education experience, including FERPA and GLBA aware access design.
- Relevant certifications (for example, Microsoft Identity and Access Administrator).
- Familiarity with identity threat detection and response tooling.
Information about how to submit an application can be found at https://employment.davidson.edu .
See All 23 Mid Level Identity and Access Management Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsMid Level Identity and Access Management Analyst Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software11
- Accounting & Auditing2
- Energy1
- Airlines1
- Media & Entertainment1
Mid Level Identity and Access Management Analyst Jobs: Frequently Asked Questions
How do I get a mid level identity and access management analyst job?
Position yourself by highlighting hands-on ownership: IAM platform administration, identity governance projects you led, and access reviews you drove from start to finish. Emphasize certifications like SailPoint, Okta, or CyberArk alongside your experience with role-based access control and least-privilege enforcement. Applications that connect your technical depth to measurable security outcomes, such as reduced access risk or faster provisioning cycles, stand out at this level.
Which companies hire mid level identity and access management analysts?
Companies hiring mid level identity and access management analysts right now include TikTok USDS Joint Venture, TikTok, and DigitalOcean, based on current listings on Migrate Mate as of November 2026. Hiring at this level comes primarily from large enterprises and regulated organizations that run complex identity environments and need analysts who can operate with real autonomy.
Are there remote mid level identity and access management analyst jobs?
Yes, remote and hybrid availability is strong for this role. About 47% of mid level identity and access management analyst openings are remote or hybrid as of November 2026, reflecting how much of this work involves cloud-based IAM platforms and cross-functional collaboration tools that do not require a physical presence.
How do I move up to a mid level identity and access management analyst role?
Moving into mid level means building depth beyond basic provisioning and de-provisioning. You get there by owning at least one full IAM implementation or migration, demonstrating expertise in a major platform like Okta, Azure AD, or SailPoint, and showing you can operate without close supervision. Taking on access certification campaigns, writing access policies, and mentoring newer analysts all signal readiness for mid level responsibility.
Which industries hire the most mid level identity and access management analysts?
Mid Level identity and access management analyst roles concentrate in Technology & Software, Accounting & Auditing, and Energy, based on current listings on Migrate Mate as of November 2026. These sectors invest heavily in IAM programs because they manage large user populations, face strict compliance requirements, and run complex hybrid or multi-cloud environments that demand experienced analysts.