IT Security Analyst RBAC

Primary Function of Position

This position is responsible for managing the technical side of our Role-Based Access Control (RBAC) program in support of the organizations business applications. As a Security Analyst you will partner directly with business application owners to design build and maintain role models that support each applications access needs and will act as an SME for RBAC initiatives working across business security engineering and operational teams to onboard and govern access for business applications.

Essential Job Duties

• Partner directly with business application owners and IT teams to design and implement role-based access control (RBAC) models tailored to each applications access needs.
• Lead application enrollment into Sailpoint IdentityIQ defining application-specific roles entitlements and provisioning/de-provisioning workflows via REST APIs.
• Perform role mining and role engineering at the application level: analyze entitlements within business applications and group them into business-aligned roles.
• Develop custom workflows rules and forms to support application-specific role assignment approval and certification processes.
• Act as the primary IAM point of contact for business application teams translating business access requirements into technical role designs.
• Administer RBAC governance for onboarded business applications ensuring role catalogs stay current as applications and business needs evolve.
• Identify gaps in application access models excess access orphaned entitlements missing segregation-of-duties (SoD) controls and drive remediation.
• Support access certification/attestation campaigns for business applications ensuring role assignments remain accurate and audit ready.
• Implement least-privilege and SoD principles within application-specific role designs aligning to security best practices.
• Design integrate and support IAM/IAG tools and processes as they relate to onboarding and maintain business application access.
• Support Sailpoint IdentityIQ version upgrades and patching as they affect application role/RBAC configurations.
• Work across Sailpoint IdentityIQ modules LCM Reporting/Analytics and Certifications with emphasis on application-level role-based reporting.
• Support SSO/MFA-integrated access for business applications (e.g. Okta) as it intersects with role assignments.
• Analyze application access requests to assess risk applying RBAC and least-privilege principles to define acceptable solutions.
• Develop and monitor KPIs and metrics on role coverage SoD violations and certification completion across supported business applications.

#LI-Hybrid

Qualifications :

Required Skills and Experience

• 5 years of experience in access governance with a focus on RBAC design for business applications; IAM tool experience (Sailpoint IdentityIQ preferred); Java development or scripting (shell or Perl) a plus.

• Minimum 5 years experience with application enrollment into an IAM/IAG platform access controls (RBAC) attestations/certifications and supporting audit-related activities.

• Experience partnering with business application owners to gather access requirements and translate them into role definitions and entitlement structures.

• Knowledge of identity directory architecture identity federation provisioning processes and single sign-on (SSO).

• Knowledge of core IT technologies and processes (network systems operating systems databases change control) as they relate to business application access.

• Ability to communicate complex access control concepts to diverse audiences from application owners and technology providers to business leaders.

• Experience with IT audit/assessment/examination particularly around application access reviews and SoD.

• Demonstrated experience delivering RBAC/role-based access projects across multiple business applications and stakeholder groups.

• Excellent documentation and communication skills.

Required Education and Training

• MS or Bachelors degree in a technical field (or equivalent additional experience).

Working Conditions

None

Preferred Skills and Experience

Must have Skills

• Identity Access Management Expertise Role Based Access Controls

Additional Information :

Intuitive is an Equal Employment Opportunity Employer. We provide equal employment opportunities to all qualified applicants and employees and prohibit discrimination and harassment of any type without regard to race sex pregnancy sexual orientation gender identity national origin color age religion protected veteran or disability status genetic information or any other status protected under federal state or local applicable laws.

We will consider for employment qualified applicants with arrest and conviction records in accordance with fair chance laws.

U.S. Export Controls Disclaimer:  In accordance with the U.S. Export Administration Regulations (15 CFR 743.13(b)) some roles at Intuitive Surgical may be subject to U.S. export controls for prospective employeeswho are nationals from countries currently on embargo or sanctions status.

Certain information you provide as part of the application will be used for purposes of determining whether Intuitive Surgical will need to (i) obtain an export license from the U.S. Government on your behalf (note: the governments licensing process can take 3 to 6 months) or (ii) implement a Technology Control Plan (TCP) (note: typically adds 2 weeks to the hiring process).  

For any Intuitive role subject to export controls final offers are contingent upon obtaining an approved export license and/or an executed TCP prior to the prospective employeesstart date which may or may not be flexible and within a timeframe that does not unreasonably impede the hiring need. If applicable candidates will be notified and instructed on any requirements for these purposes. 

This position may be filled at a different job level than listed here depending on
business need and/or on the selected candidates experience knowledge and skills.
Compensation will be based primarily on the job level at which the role is filled and the
candidates qualifications consistent with applicable law.

Remote Work :

No

Employment Type :

Full-time