EPAM SystemsRemote
Business Analyst - Identity & Access Management (IAM) / Privileged Access Management (PAM)
United States of America
Full Time
1 hour ago
H1B Sponsor Likely
Key skills
Identity & Access Management (IAM)Privileged Access Management (PAM)PAM architecture componentsVaultsSession managersCredential providersPrivileged session monitoringSingle Sign-On (SSO)Federation (SAML/OIDC)Multi-Factor Authentication (MFA)Directory ServicesAccess governanceConfluenceJIRAVisioStakeholder ManagementIAMSAMLSSOJiraCommunication
About this role
EPAM Systems is seeking a self-driven Business Analyst with deep expertise in Identity & Access Management (IAM) and Privileged Access Management (PAM). In this role, you will translate business needs into scalable security solutions, ensuring alignment between stakeholders and engineering teams.
Responsibilities:
- Gather, analyse, and document business and functional requirements with minimal daily oversight
- Collaborate with business stakeholders, security architects, and engineering teams to define PAM use cases and access control models
- Translate business requirements into functional specifications for privileged access controls, workflows, and acceptance criteria
- Facilitate workshops to identify privileged access scenarios across infrastructure, applications, and cloud platforms
- Define and document privileged account types, access levels, and entitlements (e.g., admin, service accounts, break-glass access)
- Work with engineering teams to define onboarding requirements for privileged accounts into vaults and access control systems
- Partner with compliance and risk teams to ensure policies meet regulatory and audit expectations, including traceability and reporting
- Support user acceptance testing (UAT) by defining test scenarios, validating outcomes, and ensuring alignment with business intent
- Maintain clear and structured documentation, including BRDs, FRDs, process flows, and decision matrices
Requirements:
- 5–8+ years of experience as a Business Analyst in the IAM/Security domain
- Strong experience with PAM implementations
- Understanding of PAM architecture components such as vaults, session managers, credential providers, and privileged session monitoring
- Proficiency in documentation and analysis tools (e.g., Confluence, JIRA, Visio)
- Strong understanding of IAM concepts including SSO, Federation (SAML/OIDC), MFA, Directory Services, and access governance
- Ability to work effectively with cross-functional teams including security, engineering, product, and compliance
- Excellent communication and stakeholder management skills