Cyber Security Analyst II, IAM Engineer

Yum! Brands is seeking a Cyber Security Analyst II to serve as a senior Identity and Access Management engineer. The role focuses on designing, administering, securing, governing, and continuously improving Microsoft Entra ID and hybrid Active Directory environments, while supporting authentication, privileged access, compliance, automation, and identity-security improvements.

Responsibilities:

• Engineer, administer, and support Microsoft Entra ID and hybrid Active Directory environments
• Design and maintain identity lifecycle management processes, including onboarding, transfers, and offboarding
• Administer role-based access controls (RBAC) and privileged access management solutions
• Manage and optimize:
• Privileged Identity Management (PIM)
• Entitlement Management
• Access Reviews
• Identity Protection
• Passwordless Authentication
• Multifactor Authentication (MFA)
• Conditional Access Policies
• Implement security controls to protect enterprise identities and privileged accounts
• Investigate and remediate identity-related security findings and vulnerabilities
• Support remediation efforts resulting from penetration tests, audits, and security assessments
• Evaluate emerging Identity and Security technologies and recommend adoption strategies
• Conduct compliance assessments and evidence gathering utilizing frameworks such as:
• Security Control Framework (CSF)
• CIS Controls
• PCI-DSS
• NIST
• Lead periodic entitlement reviews and access certification processes
• Develop automation solutions using PowerShell and Microsoft Graph
• Streamline identity operations through process improvements and workflow automation
• Improve operational monitoring, logging, and alerting capabilities
• Create repeatable processes that increase security and reduce operational overhead
• Serve as an Identity and Access Management subject matter expert
• Partner with Infrastructure, Cyber Security, Cloud Engineering, HR, and Application teams
• Mentor junior engineers and analysts
• Provide technical guidance during security reviews and project engagements
• Communicate technical risks and recommendations to management and business stakeholders

Requirements:

• • Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline
• • Equivalent work experience may be considered
• • 5+ years of cybersecurity, systems engineering, or IAM experience
• • 3+ years administering Microsoft Entra ID / Azure Active Directory
• • Experience supporting hybrid identity architectures
• • Experience with audit, compliance, and governance activities
• • Experience supporting enterprise-scale Microsoft 365 environments
• • Microsoft Certified: Identity and Access Administrator Associate
• • Microsoft Certified: Azure Security Engineer Associate
• • Microsoft Certified: Cybersecurity Architect Expert
• • CISSP, Security+, or equivalent industry certifications