Analyst, Identity Access Management Administrator

SitusAMC is where the best and most passionate people come to transform our client’s businesses and their own careers. Whether you’re a real estate veteran, a passionate technologist, or looking to get your start, join us as we work together to realize opportunities for everyone, we proudly serve.

At SitusAMC, we are looking to match your unique experience with one of our amazing careers, so that we can help you realize your potential and career growth within the Real Estate Industry. If you are someone who can be yourself, advocate for others, stay nimble, dream big, own every outcome, and think global but act local – come join our team!

Job Functions supporting CyberArk:

• Identity & Access Management (IAM)
  • Assist in managing AWS IAM users, groups, roles, and policies.
  • Support role-based access control (RBAC) implementation and maintenance for AWS services, including EC2, Lambda, and other cloud resources.
  • Provision, modify, and deprovision user access across enterprise applications, cloud platforms, and infrastructure systems.
  • Troubleshoot and resolve access-related issues, including permission errors, authentication failures, and role assumption problems.
  • Participate in periodic user access reviews, certification campaigns, and entitlement audits.
  • Identify, document, and escalate inappropriate access, policy violations, and segregation of duties concerns.
  • Maintain accurate identity data, including user attributes, roles, group memberships, and entitlements across supported systems.
  • Audit and maintain access controls to ensure compliance with organizational security policies, standards, and regulatory requirements.
• Privileged Access Management
  • Assist in the administration and maintenance of CyberArk Privileged Access Management (PAM) solutions.
  • Support onboarding and management of privileged accounts, service accounts, and application accounts within CyberArk.
  • Assist with account discovery, password vaulting, credential rotation, and privileged session management activities.
  • Monitor CyberArk platform health, password management processes, and scheduled jobs to ensure operational effectiveness.
  • Troubleshoot and resolve CyberArk-related issues, including account onboarding failures, password reconciliation issues, and access request problems.
  • Support privileged access request workflows, approvals, and access certifications in accordance with security policies.
  • Assist in implementing and maintaining least-privilege and privileged access security controls.
  • Perform periodic reviews of privileged accounts and privileged access assignments to ensure compliance with organizational standards.
  • Generate and maintain CyberArk reports related to privileged account activity, password management, and compliance requirements.
  • Maintain CyberArk operational documentation, procedures, and onboarding standards.
  • Collaborate with infrastructure, cloud, security, and application teams to onboard systems and accounts into CyberArk.
• Security & Compliance
  • Assist in implementing and maintaining security controls related to identity and access management.
  • Support vulnerability remediation efforts by deploying updates, patches, and corrective actions in response to identified security risks.
  • Assist with audit requests and provide supporting documentation related to access management, privileged access management, and asset inventories.
  • Ensure adherence to established security policies, procedures, standards, and best practices.
  • Support compliance initiatives related to access governance, privileged access management, and information security controls.
• Service Management & Documentation
  • Support ServiceNow workflows related to access requests, incident management, change management, and service fulfillment.
  • Create and maintain documentation for IAM and PAM processes, workflows, system configurations, operational procedures, and incident resolutions.
  • Maintain accurate records of system changes, troubleshooting activities, and access management actions.
  • Develop and update knowledge base articles and standard operating procedures.
• Collaboration & Communication
  • Collaborate with IT, Security, Infrastructure, Application, and Business teams to implement secure technology solutions.
  • Provide technical guidance and support to team members and end users as needed.
  • Communicate technical information effectively, both verbally and in writing, to technical and non-technical stakeholders.
  • Plan, prioritize, and coordinate assigned tasks to meet operational objectives and project deadlines.

Qualifications/ Requirements:

• Associate's degree or Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field; or an equivalent combination of education and experience.
• Entry level professional with 0-2 years of industry and/or relevant experience, typically at an Analyst level role or external equivalent.
• Strong attention to detail and accuracy.
• Good analytical and problem-solving skills.
• Effective verbal and written communication skills.
• Ability to manage multiple tasks and priorities.
• Customer-service mindset and ability to work collaboratively with stakeholders.
• Timely completion of user provisioning and deprovisioning requests.
• Compliance with access review schedules.
• Accuracy of user access assignments.
• Resolution time for IAM-related incidents and requests.
• Audit findings related to identity and access controls.

• Specific Experience supporting CyberArk
  • Experience in Identity and Access Management (IAM), Privileged Access Management (PAM), IT Administration, Help Desk, Systems Administration, Cybersecurity, or a related technical role.
  • Experience supporting user account administration and access management processes preferred.
  • Exposure to cloud environments, particularly Amazon Web Services (AWS), preferred.
  • Exposure to CyberArk or other Privileged Access Management solutions is a plus.
  • Basic knowledge of Identity and Access Management (IAM) and Privileged Access Management (PAM) concepts and best practices.
  • Familiarity with:
    • AWS Identity and Access Management (AWS IAM)
    • CyberArk Privileged Access Management (PAM)
    • Role-Based Access Control (RBAC)
    • Multi-Factor Authentication (MFA)
    • Single Sign-On (SSO)
    • Microsoft Active Directory
    • Microsoft Entra ID (Azure AD)
    • Mobile Device Management (MDM) platforms
    • ServiceNow or similar IT Service Management (ITSM) tools
    • Basic understanding of AWS Management Console and AWS CLI.
    • Familiarity with CyberArk components such as:
    • Password Vault Web Access (PVWA)
    • Central Policy Manager (CPM)
    • Privileged Session Manager (PSM)
  • Knowledge of Windows operating systems and Microsoft 365 environments.
  • Familiarity with IT asset management processes and inventory tracking systems.
  • Basic scripting knowledge using PowerShell, Python, or similar technologies is a plus.
  • Experience with reporting tools, dashboards, and data analysis is beneficial.

Note: This job description is not intended to be all inclusive or exclusive. At any time, employees may perform other related duties as required to meet the ongoing needs of the organization and participate in additional trainings. SitusAMC does not accept unsolicited resumes from staffing agencies, search firms or any third parties. Any unsolicited resume submitted to SitusAMC in any manner will be considered SitusAMC property, and SitusAMC will not pay a fee for any placement resulting from the receipt of an unsolicited resume.

The annual full time base salary range for this role is

Specific compensation is determined through interviews and a review of relevant education, experience, training, skills, geographic location and alignment with market data. Additionally, certain positions may be eligible to receive a discretionary bonus as determined by bonus program guidelines, position eligibility and SitusAMC Senior Management approval.

SitusAMC offers a comprehensive and competitive benefits plan.

SitusAMC is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by law.