IAM业务分析师（英文流利）

Key Responsibilities

• Stakeholder Engagement &

Requirements Analysis: o Engage with global business units and IT teams to gather identity lifecycle requirements and identify pain points in current access management processes. o Conduct deep-dive interviews to analyze current account usage, permission models, and security risks. o Translate complex business needs into detailed Business Requirement Documents (BRD) and functional specifications.

• Solution Design & ForgeRock Integration: o Assist technical teams in designing robust identity management workflows, specifically leveraging ForgeRock capabilities (e.g., Access Management, Identity Management). o Design and document role-based access control (RBAC) models and access matrices to ensure the 'least privilege' principle is applied. o Provide expert recommendations on SSO architectures, authentication flows, and integration strategies within multi-cloud or hybrid-cloud environments.
• Project Execution & Change Management: o Support the full project lifecycle, from project kickoff and planning to UAT (User Acceptance Testing) execution and issue tracking. o Develop cleanup and role governance strategies, including rules, processes, and timelines for migration and legacy system integration. o Create training materials and support stakeholder communication to ensure successful adoption of new IAM standards.
• Deliverables: o Produce core project documentation including BRDs, process diagrams, role/permission matrices, and technical recommendation reports.

Required Qualifications

• IAM Expertise: Solid understanding of Identity and Access Management principles, governance, and lifecycle management.
• Technical Proficiency: Hands-on experience or deep understanding of ForgeRock (or similar IAM suites like SailPoint, Okta, Ping Identity).
• Architectural Knowledge: Strong knowledge of SSO (Single Sign-On), MFA, SAML, OIDC, and OAuth protocols.
• Cloud Awareness: Understanding of identity management within cloud architectures (AWS/Azure/GCP) and modern SaaS integration.
• Analytical Skills: Ability to analyze large datasets to identify access inconsistencies and security gaps.
• Communication: Excellent ability to document standardized processes and communicate technical requirements to non-technical stakeholders.