Identity and Access Management Analyst

Sun Life U.S. is one of the largest providers of employee and government benefits, helping approximately 50 million Americans access the care and coverage they need. Through employers, industry partners and government programs, Sun Life U.S. offers a portfolio of benefits and services, including dental, vision, disability, absence management, life, supplemental health, medical stop-loss insurance, and healthcare navigation. We have more than 6,400 employees and associates in our partner dental practices and operate nationwide.

Visit our website to discover how Sun Life is making life brighter for our customers, partners and communities.

Sun Life embraces a hybrid work model that balances in-office collaboration with the flexibility of virtual work.

Reporting to the Manager, Identity and Access Management, the Identity and Access Management Analyst manages the lifecycle of user accounts and access privileges, ensuring compliance with security policies and industry best practices, manages user accounts, permissions, and access to resources, manages and configures authentication, ensuring secure and compliant access to applications and systems in a Zero Trust model.

Preferred skills

• BS or equivalent and 3+ years of work experience in an identity and access management function, or equivalent combination, in which there are demonstrated progressive levels of responsibility and experience.

• Experience leading IAM function along with a strong understanding of identity and access management technologies, including directory services (such as Active Directory, Okta Universal Directory), OIDC and SAML single sign-on (SSO), multi-factor authentication (MFA), and identity governance within the context of a Zero Trust model.

• Proficient in scripting languages like PowerShell or Python to automate tasks and manage IAM systems.

• Proficiency in scripting languages like PowerShell or Python and automation platforms such as Terraform to automate tasks and manage IAM systems.

• Proficient at working on a fully Agile team or willing to become an Agile expert with a focus on delivery and execution.

• Communication and collaboration expertise and experience leading identity initiatives together with various teams within the organization, including IT, security, and compliance.

Qualifications

• BS or equivalent and 3+ years of work experience working on a cyber security team managing and configuring identity and access lifecycle.

• Experience with Okta, Active Directory, and SailPoint IdentityNow is preferred.

• Technical Skills should have a strong understanding of identity and access management technologies, including directory services (such as Active Directory), single sign-on (SSO), multi-factor authentication (MFA), and identity governance. Proficiency in scripting languages like PowerShell or Python and automation platform such as Terraform or Cloud Formation.

• Soft Skills Strong analytical skills to identify patterns and trends related to user access and security incidents. Effective communication skills are crucial for collaborating with various teams and explaining technical concepts to non-technical stakeholders. Attention to detail and problem-solving skills are also essential for ensuring the security and integrity of an organization's systems and data.

Responsibilities

• Manage identity lifecycle processes, including onboarding and offboarding of identities and roles.

• Manage and maintain RBAC matrix processes, configure, and develop roles with a focus on birthright.

• Configure and manage IAM policies such as password and Multifactor Authentication.

• Configure and maintain IAM tools and technologies.

• Monitor and analyze user activity for suspicious behavior.

• Ensure compliance with healthcare regulations such as HIPAA.

• Collaborate with security teams to develop and implement IAM strategies.

• Provide technical support and guidance to internal and external customer users on IAM issues.

• Other duties as needed or required.

Salary Range: $66,400 - $99,600

At our company, we are committed to pay transparency and equity. The salary range for this role is competitive nationwide, and we strive to ensure that compensation is fair and equitable. Your actual base salary will be determined based on your unique skills, qualifications, experience, education, and geographic location. In addition to your base salary, this position is eligible for a discretionary annual incentive award based on your individual performance as well as the overall performance of the business. We are dedicated to creating a work environment where everyone is rewarded for their contributions.

Not ready to apply yet but want to stay in touch? Join our talent community to stay connected until the time is right for you!

We are committed to fostering an inclusive environment where all employees feel they belong, are supported and empowered to thrive. We are dedicated to building teams with varied experiences, backgrounds, perspectives and ideas that benefit our colleagues, clients, and the communities where we operate. We encourage applications from qualified individuals from all backgrounds.

Life is brighter when you work at Sun Life

At Sun Life, we prioritize your well-being with comprehensive benefits, including generous vacation and sick time, market-leading paid family, parental and adoption leave, medical coverage, company paid life and AD&D insurance, disability programs and a partially paid sabbatical program. Plan for your future with our 401(k) employer match, stock purchase options and an employer-funded retirement account. Enjoy a flexible, inclusive and collaborative work environment that supports career growth. We're proud to be recognized in our communities as a top employer. Proudly Great Place to Work Certified in Canada and the U.S., we've also been recognized as a "Top 10" employer by the Boston Globe's "Top Places to Work" for two years in a row. Visit our website to learn more about our benefits and recognition within our communities.

We will make reasonable accommodations to the known physical or mental limitations of otherwise-qualified individuals with disabilities or special disabled veterans, unless the accommodation would impose an undue hardship on the operation of our business. Please email thebrightside@sunlife.comto request an accommodation.

For applicants residing in California, please read our employee California Privacy Policy and Notice.

We do not require or administer lie detector tests as a condition of employment or continued employment.

Sun Life will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws, including applicable fair chance ordinances.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.