Identify Data Analyst

Agensys is seeking an Identity Data Analyst to turn identity and access data into actionable findings, risk indicators, remediation work, and leadership reporting.

This seasoned analytical role requires independent investigation of data, identification of patterns and exceptions, validation of findings with stakeholders, clear explanation of risk, and support for remediation. The analyst will work across enterprise identity, privileged-access, access, ticketing, and related operational data to help address inactive accounts, missing ownership, contractor expirations, and excessive or inconsistent access.

Responsibilities:

• Extract, normalize, analyze, and reconcile identity and access data from Active Directory, Microsoft Entra ID, PAM, Saviynt, Jira, and other authorized sources.
• Identify inactive, stale, orphaned, duplicate, unowned, misclassified, or inconsistent identities and entitlements.
• Analyze service accounts, application identities, privileged accounts, contractor accounts, group memberships, access assignments, and ownership records.
• Identify service accounts that have not logged in within defined periods and support ownership validation and remediation.
• Analyze contractor and contingent-worker data to identify upcoming expirations, missing owners, unresolved access, and offboarding risks.
• Investigate over-provisioned access, anomalous access patterns, toxic combinations, excessive group membership, and other identity-risk indicators.
• Build repeatable queries, scripts, extracts, reconciliation routines, dashboards, and reports that enable the IAM team to take action.
• Use PowerShell, SQL, Python, APIs, spreadsheets, or comparable tools to automate data collection and analysis.
• Trace historical tickets and operational records to identify recurring issues, bottlenecks, approval gaps, and process trends.
• Maintain data dictionaries, source-to-target mappings, analysis logic, assumptions, data-quality rules, and evidence supporting findings.
• Translate analytical findings into prioritized remediation backlogs with owners, recommended actions, due dates, dependencies, and status.
• Prepare recurring metrics and leadership reporting covering accomplishments, risks, trends, priorities, and unresolved decisions.
• Collaborate with IAM engineers, IAM leadership, identity architects, application owners, HR, security, audit, and business stakeholders to validate findings.
• Protect sensitive identity data and follow approved handling, access, retention, and evidence-management practices.

Required Qualifications:

• 5+ years of experience in IT, identity operations, cybersecurity analytics, data analysis, systems analysis, or a related discipline.
• Demonstrated ability to analyze enterprise data and produce actionable conclusions rather than simply compiling reports.
• Working knowledge of Active Directory and Microsoft Entra ID identity objects, groups, roles, access assignments, service accounts, and lifecycle data.
• Experience investigating data quality, access risk, account ownership, entitlement, or operational-control issues.
• Experience with at least one scripting, query, or automation language such as PowerShell, SQL, or Python.
• Strong spreadsheet and reporting skills, including reconciling large datasets and clearly explaining exceptions.
• Ability to document analysis methods, validate data with stakeholders, and defend conclusions with evidence