1,883,567open jobs
110,396companies
257,454added this week
Browse all
Salary
$75k – $90k per year
Location
In office (Rocklin)
Seniority
Junior · 1+ year exp

Confirmed on the employer's own hiring board on Oct 21, 2026. First seen by Alion on Oct 15, 2026. Williams-Sonoma scores B on the Alion truth index.

Overview
Company
Impact
Profile match
Williams-Sonoma is a specialty retailer of home furnishings and kitchenware headquartered in San Francisco, California, selling through e-commerce, catalogs and several hundred stores. Founded in 1956 by Chuck Williams in Sonoma, the company owns the Williams Sonoma, Pottery Barn, Pottery Barn Kids, Pottery Barn Teen, West Elm, Rejuvenation, Mark and Graham, GreenRow and Dormify brands, with operations in the US, Canada, Australia, the UK and India. Openings include store sales associates and design specialists, buyers and inventory planners, sourcing managers, loyalty and brand marketers, software and mobile engineers, warehouse supervisors and accountants.

About the Team

You will be part of the Identity and Access Management (IAM) function within the Cyber Security organization. The team is responsible for securing identities, managing access to critical systems, and supporting strong authentication and authorization controls across the enterprise. The IAM function is a critical domain within the WSI Security Governance program.

The IAM team’s mission is to protect the organization by ensuring the right individuals have the right access at the right time-while maintaining compliance and enabling business productivity.

About the Role

As an Information Security Analyst - Identity & Access Management, you will support the daily operation of enterprise identity services, including access provisioning, identity lifecycle activities, authentication support, privileged access requests, and identity governance. This hands-on operational role partners with IAM Engineering and business stakeholders to resolve access issues, maintain accurate access records, support SOX and PCI DSS controls, and improve repeatable processes. The position primarily supports business-hours operations with occasional escalations.

Responsibilities

  • Process Joiner/Mover/Leaver activities, including timely provisioning, modification, and deprovisioning of user access in accordance with approved requests and established controls.

  • Validate access requests, required approvals, role assignments, and least-privilege requirements; coordinate with application owners and IT teams to resolve exceptions.

  • Support access reviews, periodic certifications, entitlement validation, and remediation of inappropriate or outdated access.

  • Provide operational support for single sign-on (SSO), multi-factor authentication (MFA), and user authentication issues using Ping Identity, Microsoft Entra ID, and Active Directory.

  • Process privileged access requests and support approved workflows and access controls in Delinea Privileged Access Management (PAM).

  • Assist with service account and non-human identity inventory, ownership validation, access reviews, and lifecycle governance, including Clutch Security workflows.

  • Investigate IAM service tickets and access-related incidents; document troubleshooting, identify root causes where possible, and escalate complex platform issues to IAM Engineering or Security Operations.

  • Support SailPoint IdentityIQ identity governance workflows, including provisioning activities, access certifications, and reconciliation follow-up.

  • Collect, validate, and organize evidence for SOX and PCI DSS audits; help address control exceptions and access-related findings.

  • Identify opportunities to simplify manual work, improve operational procedures, and assist with basic scripting or workflow automation under engineering guidance.

  • Maintain accurate ticket notes, standard operating procedures, and knowledge articles; collaborate with HR, IT Service Desk, Infrastructure, application owners, Security Operations, and Audit/Compliance teams.

Criteria

  • 1-2 years of experience in information security, identity and access management, IT service operations, or a related technical field.

  • Bachelor’s degree in a related field or equivalent work experience.

  • Working understanding of identity lifecycle management, access provisioning, least privilege, and role-based access controls.

  • Experience investigating user access issues, managing service requests, and following approval and change-control procedures.

  • Familiarity with Active Directory, Microsoft Entra ID, or comparable directory and identity services.

  • Foundational understanding of SSO, MFA, privileged access, and security controls related to access management.

  • Ability to document work accurately, manage competing priorities, protect sensitive information, and collaborate across technical and business teams.

  • Strong communication, analytical, customer service, and troubleshooting skills.

Preferred Qualifications

  • Operational experience with Ping Identity, SailPoint IdentityIQ, Delinea PAM, Microsoft Entra ID, Active Directory, or Clutch Security preferred.

  • Experience supporting access certifications, identity governance, service account controls, and non-human identity oversight preferred.

  • Familiarity with SOX and PCI DSS access-control requirements and audit evidence collection preferred.

  • Basic PowerShell or Python scripting experience, or participation in IAM workflow automation and process improvements preferred.

  • Experience supporting IAM in a large enterprise or hybrid on-premises and cloud environment preferred.

  • This role requires being onsite in the Rocklin, CA office Monday through Thursday.

Our Culture & Values

We believe that taking care of our people is vital to our success and we strive to offer equitable and transparent practices for all. We prioritize connection, growth, and wellbeing.

People First

Putting People First means investing in overall well-being and opportunities to grow and advance within the organization. Depending on the position and location, here are a few highlights of what benefits may be available:

Benefits

  • A generous discount on all WSI brands

  • A 401(k) plan and other investment opportunities

  • Paid vacations, holidays, and time off to volunteer

  • Health benefits, dental and vision insurance, including same-sex domestic partner benefits

  • Tax-free commuter benefits

  • A wellness program that supports your physical, financial and emotional health

Continued Learning

  • In-person and online learning opportunities through WSI University

  • Cross-brand and cross-function career opportunities

  • Resources for self-development

  • Advisor (Mentor) program

  • Career development workshops, learning programs, and speaker series

WSI will not now or in the future commence an immigration case or "sponsor" an individual for this position (for example, H-1B or other employment-based immigration).

This role is not eligible for relocation assistance.

Williams-Sonoma, Inc. is an Equal Opportunity Employer. Williams-Sonoma, Inc. will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance, or other applicable state or local laws and ordinances.

The expected starting pay range for this position is $75,000 - $90,000. Applicable pay ranges may differ across markets. Actual pay will be determined based on experience and other job-related factors permitted by law. In addition to competitive pay, compensation may include a variety of other components like benefits, paid time off, merit, and bonus opportunities.

Free account
Stop reading job ads. Get the ones that fit.
One free account turns this page into a shortlist built around your stack, your level and your pay.
Match on every job. Stack, seniority, pay and location, scored against your profile.
1,883,567 open roles. Read straight off company career pages, refreshed every day.
Unlimited applications. Every one you send is tracked in one place, on-site or on a company board.
3 tailored CVs a month. Rewritten for the exact job you are applying to. Included free.
Create a free account Continue with Google
Free forever. No card. Under a minute.

Your match

How well do you fit this role?
Two answers are enough for a real match. No account needed.
Check my fit
Answers stay in this browser until you create an account.

Recommended for you based on this role

Security
Similar stack
Same company
Rocklin
$258k per year • In office • 3+ years exp • Palo Alto • Austin • New York • Washington
Python
Rust
DevOps
Helm
GitOps
Kubernetes
Cybersecurity
Defense in Depth
Least Privilege
Kyverno
Apply
$153k – $256k per year • Equity • In office • Full-Time • 8+ years exp • Bachelor's Degree • Charlotte • Austin • Tempe
Python
Java
Ruby
C#
AI/ML
Anomaly Detection
Machine Learning
DevOps
Terraform
Ansible
CloudFormation
Pulumi
AWS
Amazon EC2
Amazon S3
IAM
API Gateway
Cybersecurity
Zero Trust
Threat Modeling
AWS WAF
SIEM
OWASP
Apply
$9k – $16k per year (gross) • In office • Full-Time • Bang Phli
Apply
DevSecOps 2 hours ago
Hybrid • Full-Time • Khon Kaen
DevOps
GCP
DigitalOcean
Helm
GitLab CI
CI/CD
AWS
Kubernetes
Cloudflare
Shift-Left
GitLab
DNS
Cybersecurity
Snyk
SonarQube
Trivy
ISO 27001
OWASP Top 10
Shift-Left Security
Apply
Cybersecurity 1 hour ago
Hybrid • Full-Time • Khon Kaen
DevOps
GCP
DigitalOcean
AWS
Kubernetes
Cybersecurity
CVSS
SIEM
Apply
≈ $8.5k – $24k per year (Estimated) • In office • Full-Time • 2+ years exp • Bachelor's Degree • Phnom Penh
DevOps
Splunk
Azure
Graylog
Incident Management
Cybersecurity
NIST CSF
Least Privilege
Microsoft Entra ID
Active Directory
SIEM
Management
ITIL
Apply
Hybrid • Solna
PowerShell
AI/ML
Copilot
Copilot Studio
DevOps
Azure
IAM
Cybersecurity
GDPR
Microsoft Entra ID
Analytics
Power BI
Management
OneDrive
SharePoint
Apply
≈ $61k – $156k per year (Estimated) • Remote (Australia) • Full-Time • Australia
Cybersecurity
Microsoft Entra ID
Active Directory
Apply
≈ $11k – $25k per year (Estimated) • In office • Full-Time • Bachelor's Degree • Quezon City
Cybersecurity
ISO 27001
PCI DSS
HIPAA
Analytics
Microsoft Excel
Apply
$195k – $237k per year • In office • Full-Time • 3+ years exp • San Francisco
Java
Kotlin
TypeScript
AI/ML
Model Context Protocol
AI Agents
DevOps
Platform Engineering
Cybersecurity
Okta
Least Privilege
Auth0
Apply
$105k – $125k per year • In office • 3+ years exp • Bachelor's Degree • Rocklin
Python
PowerShell
DevOps
IAM
Linux
Windows
TCP/IP
DNS
DHCP
Cybersecurity
Crowdstrike
Google SecOps
Tanium
Ping Identity
Delinea
SIEM
Apply
$120k – $150k per year • In office • 5+ years exp • Brooklyn
AI/ML
Red Teaming
DevOps
Kali Linux
Linux
Cybersecurity
Burp Suite
Metasploit
Cobalt Strike
BloodHound
MITRE ATT&CK
Active Directory
Apply
$105k – $125k per year • In office • 3+ years exp • Bachelor's Degree • San Francisco
Python
PowerShell
DevOps
IAM
Linux
Windows
TCP/IP
DNS
DHCP
Cybersecurity
Crowdstrike
Google SecOps
Tanium
Ping Identity
Delinea
SIEM
Apply
$100k – $130k per year • In office • 3+ years exp • Bachelor's Degree • Brooklyn
DevOps
Prometheus
Cortex
Cybersecurity
Crowdstrike
MISP
Google SecOps
Cortex XSOAR
Tanium
SIEM
Apply
$100k – $130k per year • In office • 3+ years exp • Bachelor's Degree • Brooklyn
DevOps
Prometheus
Cortex
Cybersecurity
Crowdstrike
MISP
Google SecOps
Cortex XSOAR
Tanium
SIEM
Apply
$105k – $125k per year • In office • 3+ years exp • Bachelor's Degree • Rocklin
Python
PowerShell
DevOps
IAM
Linux
Windows
TCP/IP
DNS
DHCP
Cybersecurity
Crowdstrike
Google SecOps
Tanium
Ping Identity
Delinea
SIEM
Apply
≈ $68k – $130k per year (Estimated) • In office • 3+ years exp • Bachelor's Degree • Rocklin
DevOps
Prometheus
Cortex
Cybersecurity
Crowdstrike
MISP
Google SecOps
Cortex XSOAR
Tanium
SIEM
Apply
$90k – $110k per year • In office • 3+ years exp • Bachelor's Degree • Rocklin
Python
PowerShell
DevOps
IAM
Linux
Windows
TCP/IP
DNS
DHCP
Cybersecurity
Crowdstrike
Google SecOps
Tanium
Ping Identity
Delinea
SIEM
Apply
$90k – $110k per year • In office • 3+ years exp • Bachelor's Degree • Rocklin
Python
PowerShell
AI/ML
AI Agents
DevOps
Rest API
Terraform
Prometheus
CI/CD
Git
Docker
Cortex
IAM
Cybersecurity
Crowdstrike
MISP
Least Privilege
Google SecOps
Cortex XSOAR
Tanium
Ping Identity
Delinea
SIEM
Apply
In office • Part-Time • Rocklin
Apply
See all jobs
This is one of many
1,883,567 more open roles from verified company boards, updated every day.