{"id":3205261,"url":"https://alion.io/job/cbi-sr-identity-and-access-management-analyst","title":"Sr Identity and Access Management Analyst","company":{"id":1835673,"name":"CB&I","domain":"cbi.com","url":"https://alion.io/company/cbi-com","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["The Woodlands, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":101000,"max_usd":194000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1306},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CyberArk","optional":false},{"name":"GCP","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Okta","optional":false},{"name":"Oracle ERP","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false}],"status":"closed","first_seen_at":"2026-10-24T10:35:07Z","employer_posted_date":null,"last_verified_at":"2026-10-24T18:21:00Z","board_verified":false,"closed_at":"2026-10-24T18:21:00Z","days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"CB&I delivers integrated storage and asset-management solutions that help customers operate safely, reliably, and efficiently across the lifecycle of their facilities. The Senior Identity and Access Management Analyst will support and mature enterprise IAM capabilities by managing access governance, identity lifecycle processes, authentication mechanisms, compliance controls, audit readiness, and IAM platform integrations.\n\nResponsibilities\nServe as a subject matter expert for IAM and SOX logical access controls across financial systems\nAdminister and optimize IAM-based access governance, including provisioning workflows, lifecycle management, group structures, and access certifications\nDesign and maintain scalable IAM frameworks aligned to least privilege, RBAC, segregation of duties (SoD), and SOX compliance requirements\nExecute and support SOX logical access controls, including provisioning, modifications, terminations, privileged access management, and user access reviews (UARs)\nPartner with system owners and business stakeholders to validate the appropriateness and alignment of access with business responsibilities\nMaintain strong access governance controls by proactively reviewing and remediating access risks, including excessive access, orphaned accounts, stale memberships, and SoD conflicts\nSupport audit readiness through documentation, evidence preparation, remediation tracking, and control support activities\nCollaborate on system implementations and enhancements to ensure IAM controls are embedded, scalable, and supportable\nDrive continuous improvement and automation opportunities across IAM governance and access management processes\nManage end-to-end identity lifecycle processes (joiner, mover, leaver) for employees, contractors, and project-based users\nProvision and deprovision access across enterprise systems, engineering applications, and project platforms (e.g., JD Edwards, Autodesk platforms)\nMaintain and support identity repositories including Microsoft Entra ID (Azure AD) and on-premises Active Directory\nPerform and support user access reviews, certifications, and remediation activities\nImplement and support authentication mechanisms including SSO, MFA, and conditional access policies\nCollaborate on IAM platform configuration, integrations, and enhancements (e.g., SailPoint, Okta, Microsoft Entra ID, CyberArk)\nAutomate provisioning workflows to improve efficiency and reduce manual processes\nIntegrate IAM controls with cloud platforms (Azure, AWS) and SaaS applications, including federation and role mapping\nProvide guidance, training, and mentoring to IT staff and business stakeholders\n\nSkills\nBachelor's Degree in Information Technology, Cybersecurity, or related field\n10+ Years of Information Technology experience\n5+ years of hands-on experience in IAM, IT security, or infrastructure roles\nStrong hands-on experience with enterprise IAM platforms such as Microsoft Entra ID, Okta, SailPoint, or equivalent\nDemonstrated hands-on experience implementing and managing authentication, authorization, and federation technologies including SSO, MFA, SAML, OAuth 2.0, OpenID Connect, and directory services such as Active Directory and LDAP\nDemonstrated hands-on experience applying and supporting identity security principles and best practices including Zero Trust Architecture, adaptive authentication, conditional access policies, segregation of duties (SoD), and identity threat detection and response\nDemonstrated hands-on experience supporting cloud and hybrid identity architectures across platforms such as Azure AD (Entra ID), AWS IAM, and GCP IAM, including integration with on-premises environments\nHands-on experience with access governance, SoD enforcement, and audit/compliance processes\nStrong analytical, problem-solving, and communication skills\nScripting or automation experience (PowerShell, Python)\nStrong assessment and analytical expertise to interpret identity governance reports, access certifications, and security monitoring outputs to proactively identify risks, access anomalies, and control gaps, implementing corrective actions before impacting operations\nStrong knowledge of identity and access management concepts including Identity Lifecycle Management (Joiner, Mover, Leaver), Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and least privilege access design\nIn-depth understanding of authentication, authorization, and federation technologies including SSO, MFA, SAML, OAuth 2.0, OpenID Connect, and directory services such as Active Directory and LDAP\nStrong knowledge of privileged access management (PAM), identity governance and administration (IGA) platforms (e.g., SailPoint, Saviynt, Microsoft Entra ID), and access certification processes\nStrong understanding of identity security principles and best practices including Zero Trust Architecture, adaptive authentication, conditional access policies, segregation of duties (SoD), and identity threat detection and response\nStrong working knowledge of cloud and hybrid identity architectures across platforms such as Azure AD (Entra ID), AWS IAM, and GCP IAM, including integration with on-premises environments\nSolid understanding of cybersecurity frameworks and standards (e.g., NIST, ISO 27001, SOX, HIPAA) as they apply to identity governance, audit readiness, and compliance controls\nSolid understanding of encryption technologies and secure credential management including key management, secrets handling, and certificate-based authentication\nStrong knowledge of IAM automation and scripting using tools such as PowerShell, Python, and APIs to streamline provisioning, deprovisioning, and access workflows\nFamiliarity with:\n + Identity analytics and identity threat detection tools\n + SOAR and SIEM integrations for identity monitoring\n + Zero Trust and Identity Security Posture Management (ISPM)\n + Cloud-native identity services and Saas integrations\nUnderstanding of risk scoring models, access review methodologies, and industry frameworks related to identity security (e.g., NIST 800-63, MITRE ATT&CK for credential access)\nFamiliarity with enterprise systems such as ERP platforms, engineering tools, and project systems\nMust have excellent organizational, project management, and communication skills with the ability to manage multiple IAM initiatives and priorities effectively\nLeverages strong communication and collaboration skills to work with global stakeholders across security, IT, audit, and business units to resolve complex identity and access issues\nAbility to perform peer reviews of IAM configurations, policies, workflows, and documentation to ensure accuracy, compliance, and adherence to best practices\nPossesses strong verbal and written communication skills in English, with demonstrated ability to translate complex IAM concepts to all levels of the organization, including executives, auditors, engineers, and subject matter experts\nIndustry certifications such as: CISSP or CISM; Microsoft SC-300 (Identity and Access Administrator) or other relevant IAM or security certifications\nExperience in Engineering, Procurement, and Construction (EPC) or industrial environments is desired\n\nCompany Overview\nCB&I provide technology and infrastructure for the energy industry, focusing on safety and quality standards. It is a sub-organization of Westinghouse Electric Company. It was founded in 1889, and is headquartered in The Woodlands, Texas, USA, with a workforce of 1001-5000 employees. Its website is http://www.cbi.com.\n\nCompany H1B Sponsorship\nCB&I has a track record of offering H1B sponsorships, with 1 in 2026, 3 in 2024, 10 in 2023, 7 in 2022, 29 in 2021, 20 in 2020. Please note that this does not guarantee sponsorship for this specific role.","description_format":"text","description_chars":7766,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","Natural Resources","Petroleum & Mining Engineering","Oil & Gas"],"lifecycle":[{"event":"open","at":"2026-10-24T12:20:00Z"},{"event":"close","at":"2026-10-24T18:21:00Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/cbi-sr-identity-and-access-management-analyst","json_url":"https://alion.io/job/cbi-sr-identity-and-access-management-analyst.json","meta":{"generated_at":"2026-11-06T09:56:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18038,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1835673},"rest":"https://alion.io/mcp/rest/get_company?id=1835673"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcbi-sr-identity-and-access-management-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcbi-sr-identity-and-access-management-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcbi-sr-identity-and-access-management-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cbi-sr-identity-and-access-management-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcbi-sr-identity-and-access-management-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3205261}},{"tool":"search_jobs","arguments":{"company":"cbi.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3205261},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}