STEM OPT Identity Access Management Jobs
Identity Access Management roles in cybersecurity and IT governance qualify for the 24-month STEM OPT extension if your degree falls under an eligible CIP code. Employers must be enrolled in E-Verify to hire you on STEM OPT, and you'll need a signed I-983 training plan before your extension begins.
Find STEM OPT Identity Access Management JobsOverview
Showing 5 of 9+ Identity Access Management jobs
See all Identity Access Management Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Identity Access Management roles.
Get Access To All JobsDo you want your voice heard and your actions to count?
Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.
With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.
Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.
The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.
Identity & Access Management, Analyst (Recertification Team)
Position Summary
The Access Recertification Analyst is responsible for executing and supporting periodic access reviews and certification campaigns to ensure users maintain appropriate access based on business need, security policies, and regulatory requirements using enterprise solution. The role works closely with application owners, managers, IAM teams, auditors, and technology partners to maintain accurate access governance controls.
Key Responsibilities
Access Review & Certification
- Manage quarterly, semi-annual, annual, and ad hoc access recertification campaigns.
- Monitor completion status and follow up on overdue reviews.
- Support certifiers with review questions and certification decisions.
- Facilitate reassignment of reviews to the correct owner when necessary.
Data Analysis & Validation
- Analyze access review reports and certification data.
- Identify discrepancies, orphan accounts, and invalid ownership assignments.
- Validate access reviewer mappings and ownership records.
- Perform data reconciliation and quality assurance activities.
Access Governance & Compliance
- Ensure access reviews comply with regulatory and audit requirements.
- Support SOX, and internal audit requests.
- Maintain evidence of certifications and remediation actions.
- Escalate non-compliance issues as required.
Reporting & Metrics
- Produce campaign status reports and dashboards.
- Track completion rates, overdue items, escalations, and remediation metrics.
- Provide management updates on campaigns and certification results.
Process Improvement
- Identify opportunities to automate manual certification activities.
- Improve review workflows, SOPs, and validation procedures.
- Support enhancements to IAM and IGA platforms such as ACAT, Omada, SailPoint.
- Explore the use of AI agents or other automation tools to eliminate repetitive tasks and enhance service delivery.
Required Skills
- Attention to detail
- Strong written and verbal communication and interpersonal skills
- Strong Customer Service Skills
- Strong Excel and SQL query skills
- Experience with Power BI, Power Automate, Logic Apps, Copilot Studio, or similar automation platforms
- Stakeholder management and follow-up skills
- Capability to adapt to new and changing environments and handle multiple priorities, including learning quickly
Preferred Qualifications
- Identity & Access Management (IAM) Access Governance / Access Certification experience
- Audit and compliance knowledge
- Experience with IAM Recertification tools; SailPoint experience preferred
- Financial services / Information Security experience
Education Requirements
Bachelor’s degree in Computer Science, Technology, or Related Fields. Related experience may be considered without a Bachelor's degree.
The typical base pay range for this role is
$85,000k to $107,000k Non NY/NJ
$92,000k to $123,000k NY/NJ
depending on job-related knowledge, skills, experience and location. This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, and paid vacation, sick days, and holidays.
We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws (including (i) the San Francisco Fair Chance Ordinance, (ii) the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, (iii) the Los Angeles County Fair Chance Ordinance, and (iv) the California Fair Chance Act) to the extent that (a) an applicant is not subject to a statutory disqualification pursuant to Section 3(a)(39) of the Securities and Exchange Act of 1934 or Section 8a(2) or 8a(3) of the Commodity Exchange Act, and (b) they do not conflict with the background screening requirements of the Financial Industry Regulatory Authority (FINRA) and the National Futures Association (NFA). The major responsibilities listed above are the material job duties of this role for which the Company reasonably believes that criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of conditional offer of employment, if any.
The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities duties and skills required of personnel so classified.
We are proud to be an Equal Opportunity Employer and committed to leveraging the diverse backgrounds, perspectives and experience of our workforce to create opportunities for our colleagues and our business. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status of an individual or that individual’s associates or relatives that is protected under applicable federal, state, or local law.
Do you want your voice heard and your actions to count?
Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.
With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.
Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.
The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.
Identity & Access Management, Analyst (Recertification Team)
Position Summary
The Access Recertification Analyst is responsible for executing and supporting periodic access reviews and certification campaigns to ensure users maintain appropriate access based on business need, security policies, and regulatory requirements using enterprise solution. The role works closely with application owners, managers, IAM teams, auditors, and technology partners to maintain accurate access governance controls.
Key Responsibilities
Access Review & Certification
- Manage quarterly, semi-annual, annual, and ad hoc access recertification campaigns.
- Monitor completion status and follow up on overdue reviews.
- Support certifiers with review questions and certification decisions.
- Facilitate reassignment of reviews to the correct owner when necessary.
Data Analysis & Validation
- Analyze access review reports and certification data.
- Identify discrepancies, orphan accounts, and invalid ownership assignments.
- Validate access reviewer mappings and ownership records.
- Perform data reconciliation and quality assurance activities.
Access Governance & Compliance
- Ensure access reviews comply with regulatory and audit requirements.
- Support SOX, and internal audit requests.
- Maintain evidence of certifications and remediation actions.
- Escalate non-compliance issues as required.
Reporting & Metrics
- Produce campaign status reports and dashboards.
- Track completion rates, overdue items, escalations, and remediation metrics.
- Provide management updates on campaigns and certification results.
Process Improvement
- Identify opportunities to automate manual certification activities.
- Improve review workflows, SOPs, and validation procedures.
- Support enhancements to IAM and IGA platforms such as ACAT, Omada, SailPoint.
- Explore the use of AI agents or other automation tools to eliminate repetitive tasks and enhance service delivery.
Required Skills
- Attention to detail
- Strong written and verbal communication and interpersonal skills
- Strong Customer Service Skills
- Strong Excel and SQL query skills
- Experience with Power BI, Power Automate, Logic Apps, Copilot Studio, or similar automation platforms
- Stakeholder management and follow-up skills
- Capability to adapt to new and changing environments and handle multiple priorities, including learning quickly
Preferred Qualifications
- Identity & Access Management (IAM) Access Governance / Access Certification experience
- Audit and compliance knowledge
- Experience with IAM Recertification tools; SailPoint experience preferred
- Financial services / Information Security experience
Education Requirements
Bachelor’s degree in Computer Science, Technology, or Related Fields. Related experience may be considered without a Bachelor's degree.
The typical base pay range for this role is
$85,000k to $107,000k Non NY/NJ
$92,000k to $123,000k NY/NJ
depending on job-related knowledge, skills, experience and location. This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, and paid vacation, sick days, and holidays.
We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws (including (i) the San Francisco Fair Chance Ordinance, (ii) the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, (iii) the Los Angeles County Fair Chance Ordinance, and (iv) the California Fair Chance Act) to the extent that (a) an applicant is not subject to a statutory disqualification pursuant to Section 3(a)(39) of the Securities and Exchange Act of 1934 or Section 8a(2) or 8a(3) of the Commodity Exchange Act, and (b) they do not conflict with the background screening requirements of the Financial Industry Regulatory Authority (FINRA) and the National Futures Association (NFA). The major responsibilities listed above are the material job duties of this role for which the Company reasonably believes that criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of conditional offer of employment, if any.
The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities duties and skills required of personnel so classified.
We are proud to be an Equal Opportunity Employer and committed to leveraging the diverse backgrounds, perspectives and experience of our workforce to create opportunities for our colleagues and our business. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status of an individual or that individual’s associates or relatives that is protected under applicable federal, state, or local law.
See all STEM OPT Identity Access Management Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new STEM OPT Identity Access Management Jobs.
Get Access To All JobsTips for Finding STEM OPT Authorization in Identity Access Management
Verify your CIP code covers IAM
Check that your degree's CIP code appears on the STEM OPT eligible fields list maintained by USCIS. Computer science, information assurance, and cybersecurity codes typically qualify, but information systems degrees vary by program classification.
Confirm E-Verify enrollment before applying
Search the E-Verify employer search tool to confirm a company is enrolled before you invest time interviewing. IAM teams at staffing firms and consulting shops frequently subcontract, so verify the actual legal employer, not the client site.
Build your I-983 training plan around IAM competencies
Draft your I-983 learning objectives using specific IAM competencies: identity lifecycle management, privileged access controls, and zero-trust architecture. Vague training plans get flagged by DSOs, so map each goal to your role's actual responsibilities.
Target employers with active PERM and LCA filings
Use Migrate Mate to filter IAM roles by employers who have filed Labor Condition Applications, signaling they understand sponsored work authorization and have HR processes built for international hires on OPT.
Negotiate your start date around cap-gap protection
If your OPT expires before October 1 and your employer files an H-1B visa petition on your behalf, cap-gap automatically extends your work authorization. Coordinate your offer letter start date so there's no gap between your EAD expiration and cap-gap coverage.
Use IAM certification credentials to offset degree mismatches
If your degree is adjacent to IAM, such as electrical engineering or applied mathematics, industry certifications like CISSP or CyberArk credentials document your technical training and strengthen the employer's I-983 justification for placing you in an IAM role.
Frequently Asked Questions
Does an Identity Access Management role qualify for the STEM OPT extension?
IAM roles typically qualify if your underlying degree has an eligible CIP code, such as computer science, information assurance, or cybersecurity. The role itself must require STEM knowledge and be directly related to your degree field. Your DSO confirms eligibility based on your program's CIP code, not your job title alone.
What E-Verify requirement applies to my STEM OPT employer in an IAM role?
Your employer must be enrolled in E-Verify before your STEM OPT extension is approved. This applies to the legal entity signing your I-983, not necessarily a client site where you work. If you're placed through a staffing agency or consulting firm, confirm which entity holds your employment record and verify their E-Verify status directly through the E-Verify employer search.
How do I complete the I-983 training plan for an IAM position?
Your I-983 must outline specific learning goals tied to your IAM role, such as implementing identity governance frameworks, managing privileged access systems, or deploying multi-factor authentication solutions. Both you and your employer's authorized representative must sign it. Your DSO reviews and approves it before USCIS processes your extension, so vague or generic objectives will delay approval.
Where can I find IAM jobs that sponsor STEM OPT students?
Migrate Mate filters IAM roles by employers with active Labor Condition Application filing history, so you can identify companies that have already navigated sponsored work authorization. This saves time compared to applying broadly and discovering after interviews that an employer has never hired on OPT or isn't enrolled in E-Verify.
What happens to my STEM OPT authorization if my IAM employer loses E-Verify enrollment?
If your employer's E-Verify enrollment lapses or is terminated after your STEM OPT extension is approved, your authorization is at risk. USCIS requires continuous E-Verify enrollment throughout your extension period. You should notify your DSO immediately, and you may need to transfer to a new qualifying employer and file an updated I-983 to maintain valid status.