IT Security Analyst - RBAC

Role overview

IT Security Analyst - RBAC at Intuitive

Primary Function of Position This position is responsible for managing the technical side of our Role-Based Access Control (RBAC) program in support of the organization's business applications.

Responsibilities

• Perform role mining and role engineering at the application level: analyze entitlements within business applications and group them into business-aligned roles.
• Support access certification/attestation campaigns for business applications, ensuring role assignments remain accurate and audit ready.
• Design, integrate, and support IAM/IAG tools and processes as they relate to onboarding and maintain business application access.
• Work across Sailpoint IdentityIQ modules — LCM, Reporting/Analytics, and Certifications — with emphasis on application-level, role-based reporting.
• Develop and monitor KPIs and metrics on role coverage, SoD violations, and certification completion across supported business applications. #LI-Hybrid

Employment details

• Location: Bengaluru [INDIA] [India]

Application details

• Essential Job Duties Partner directly with business application owners and IT teams to design and implement role-based access control (RBAC) models tailored to each application's access needs.
• Develop custom workflows, rules, and forms to support application-specific role assignment, approval, and certification processes.
• Identify gaps in application access models — excess access, orphaned entitlements, missing segregation-of-duties (SoD) controls — and drive remediation.
• Implement least-privilege and SoD principles within application-specific role designs, aligning to security best practices.
• Support Sailpoint IdentityIQ version upgrades and patching as they affect application role/RBAC configurations.
• Analyze application access requests to assess risk, applying RBAC and least-privilege principles to define acceptable solutions.

Additional role details

• As a Security Analyst, you will partner directly with business application owners to design, build, and maintain role models that support each application's access needs, and will act as an SME for RBAC initiatives, working across business, security, engineering, and operational teams to onboard and govern access for business applications.
• Lead application enrollment into Sailpoint IdentityIQ, defining application-specific roles, entitlements, and provisioning/de-provisioning workflows via REST APIs.
• Act as the primary IAM point of contact for business application teams, translating business access requirements into technical role designs.
• Administer RBAC governance for onboarded business applications, ensuring role catalogs stay current as applications and business needs evolve.
• Support SSO/MFA-integrated access for business applications (e.g., Okta) as it intersects with role assignments.