Senior Security Analyst - IAM

Location Remote-United States Category Information Technology Department Information Services Shift Weekday Day Position Type Full Time Scheduled Weekly Hours 40 Req # JR7503 Job Description We are seeking a highly motivated Senior Security Analyst to join our Identity & Access Management (IAM) team, supporting both Identity Governance & Administration (IGA) and Customer Identity & Access Management (CIAM) capabilities. In this role, you will be responsible for the administration, optimization, and continuous improvement of enterprise identity solutions, partnering with security, application, infrastructure, and business teams to deliver secure, compliant, and seamless identity experiences. The ideal candidate will possess hands-on expertise with Saviynt IGA and Auth0 CIAM, including identity lifecycle management, access governance, provisioning, authentication, authorization, role management, and customer identity services. This position will support strategic IAM initiatives, troubleshoot complex identity and access issues, drive automation and process improvements, assist with audit and compliance activities, and contribute to the overall security posture of the organization. Successful candidates will demonstrate strong analytical and problem-solving skills, a deep understanding of IAM best practices, and the ability to influence stakeholders in a fast-paced, collaborative environment. This position may be eligible for remote work. However, St. Jude requires all remote employees to: Travel to our Memphis campus for the interview process and/or orientation, if selected Travel to Memphis to work on-site for one week per quarter, or as requested based on business needs, if hired. By applying, you acknowledge and agree to these travel requirements as a condition of employment. This position is remote within approved U.S. locations. Due to state-specific employment regulations, we are unable to consider applicants currently residing in California for remote work; however, candidates based in California who are willing to relocate to an approved location may be considered. Job Responsibilities: Coordinate day-to-day delivery activities across the Agile team and across engineering workstreams. Help the team understand sprint goals and delivery expectations. Track progress against committed stories, tasks, defects, and technical work. Align technical activities with the overall solution design. Ensure engineers understand technical dependencies and sequencing. Facilitate technical discussions and decision-making. Help resolve implementation questions or conflicts. Ensure work across multiple engineers integrates into a complete solution. Escalate technical concerns to the Systems Engineering Lead or Architecture when needed. Independently lead activities related to assigned project/area (including implementation of security controls, risk assessments, security risk management processes, risk awareness activities). Lead setting up and optimization of security management processes for internal customers as assigned. Guide and direct team members around issues related to systems/procedures. Actively contribute in project teams, panels, technological platforms and meetings. Participate in meetings with cross-functional teams to understand business/organizational processes and identify emerging security requirements. Train and guide users and other business teams in relation to security controls, processes, and issues. Train and mentor team members around new security controls/ systems/ processes. Perform other duties as assigned to meet the goals and objectives of the department and institution. Maintains regular and predictable attendance. Minimum Education and/or Training: Bachelor's degree required. MBA or related Master's in technology field preferred. Minimum Experience: Minimum requirement: 4+ years of demonstrable work experience in security preferably in the healthcare research industry. Demonstrated experience working with securing IT technology (e.g., cloud, SaaS, network/server management) with an insight into IT risk, threat actors, and attack vectors. Experience managing more complex IT security processes/ projects. Experience administering and configuring IGA platforms e.g. Saviynt Enterprise Identity Cloud (EIC) and SailPoint preferred. Experience with Auth0 including customer identity management, authentication flows, MFA, federation, and API security preferred. Knowledge of identity governance, access certifications, RBAC, SoD controls, and automated provisioning/deprovisioning preferred. Familiarity with modern authentication and authorization standards, including SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, and JWT preferred. Experience supporting compliance and audit requirements related to identity and access management preferred. Strong communication, stakeholder management, and project delivery skills preferred. Licensure, Registration and/or Certification Required by SJCRH Only: