IT Access Administrator

The IT Access Administrator supports the monitoring of application access, assists with the implementation and maintenance of system tools, and helps maintain IT-related policies and procedures to ensure accuracy and mitigate risk for ORNL Federal Credit Union. This position assists with IT communication within the organization and across IT teams to help ensure clarity, alignment, and timely updates on incidents, initiatives, policies, and system changes.

Essential Functions & Responsibilities:

• Performs access account administration tasks for business lines, external partners, senior management, and internal customers, including privilege requests and password management, in alignment with Identity and Access Management (IAM) and Privileged Access Management (PAM) principles. Duties include applying least privilege, supporting identity lifecycle activities (onboarding, role changes, and offboarding), and following secure credential handling practices for privileged accounts. Assists project teams by helping verify that access entitlement controls, segregation of duties, and compliance requirements are implemented and maintained. Supports the deployment, configuration, and optimization of IAM and PAM tools, participates in periodic and ongoing access reviews, and helps ensure adherence to regulatory and security standards.
• Supports IT communication within the organization, with external entities, and across IT teams to promote clarity, alignment, and timely updates. Assists in delivering accurate and consistent messaging during incidents to help minimize business impact, communicating planned system changes and maintenance windows, and sharing updates on IT policies and procedures. Acts as a liaison for IT projects as assigned by providing progress updates and basic impact information, and helps foster collaboration among IT teams through regular updates and documentation. During crisis or recovery events, assists in providing prompt and transparent communication of escalation protocols and recovery status to stakeholders.
• Maintains a department-level project list and coordinates with vendors, equipment, and supplies as directed. Helps develop schedules for system testing activities and coordinates participation and attendance with key stakeholders. Works within the ticketing systems to ensure tickets are addressed in a timely manner. Performs operational tasks for certificate and token management and provides timely and clear communications to stakeholders related to technical changes, projects, and system testing.
• Develops and/or maintains written procedures and “How to” documentation to support access management functions and application access administration. Maintains and updates the Staff List, Role Templates, and Policy Templates, coordinating with appropriate business lines for annual reviews. Supports periodic entitlement revalidations to confirm that staff have appropriate access and entitlements.
• Maintains metrics for access management that align with organizational objectives. Creates and updates dashboards to support access management functions and analyzes system and database logs to help identify and resolve potential or existing issues. Proactively identifies and reports process gaps and assists in remediation efforts.
• Participates in IT’s Change Advisory Board (CAB) activities as assigned, coordinating with vendors, stakeholders, and schedules in alignment with approved change windows. Reviews proposed access-related and organizationally impactful changes and prepares or delivers timely communication if warranted.
• Performs other job-related duties as assigned.

Work Experience:

• Minimum of 3 years of experience in IT access administration, identity and access management is required
• Minimum of 1 year experience reviewing and providing recommended access levels for core business applications or enterprise platforms, including role-based access control is required
• Experience working with ticketing systems, access request workflows, and documented service level expectations is required
• 1 year of experience working in a financial institution is preferred
• Experience supporting audits, access reviews, entitlement revalidations, or compliance-related activities within a regulated environment is preferred
• Experience with Identity and Access Management (IAM), Privileged Access Management (PAM), Active Directory, Microsoft Entra ID/Azure AD, or similar access control technologies is preferred
• Experience developing or maintaining procedures, role templates, and process documentation related to access administration is preferred
• Experience supporting change management, incident communications, or cross-functional IT coordination in a business environment is preferred

Education:

• A high school diploma or GED is required.
• A Bachelors degree in Computer Science, Management, Education, Information Technology, Technical Administration, Business, Information Systems, or in a related field is preferred.

Other skills required:

• Proficiency in Microsoft 365.
• Experience supporting multiple users/stakeholders.
• Knowledge of entitlements, groups, and role configuration.