Cyber Security Analyst II, IAM Engineer

Position Summary

The Cyber Security Analyst II serves as a senior Identity and Access Management (IAM) engineer responsible for the design, administration, security, governance, and continuous improvement of Yum's Microsoft Entra ID (Azure Active Directory) environment. This role is responsible for securing enterprise identities, implementing modern authentication controls, managing privileged access, supporting compliance initiatives, and driving identity-related security improvements across cloud and hybrid infrastructures.

The successful candidate operates with limited supervision, independently resolves complex identity-security challenges, develops new processes and operational efficiencies, and acts as a trusted technical resource for other team members and stakeholders. This scope aligns with Level 8 expectations within the Yum Technology Job Leveling Framework.

Key Responsibilities

Identity & Access Management

• Engineer, administer, and support Microsoft Entra ID and hybrid Active Directory environments.
• Design and maintain identity lifecycle management processes, including onboarding, transfers, and offboarding.
• Administer role-based access controls (RBAC) and privileged access management solutions.
• Manage and optimize:
• Privileged Identity Management (PIM)
• Entitlement Management
• Access Reviews
• Identity Protection
• Passwordless Authentication
• Multifactor Authentication (MFA)
• Conditional Access Policies

Security Engineering

• Implement security controls to protect enterprise identities and privileged accounts.
• Investigate and remediate identity-related security findings and vulnerabilities.
• Support remediation efforts resulting from penetration tests, audits, and security assessments.
• Evaluate emerging Identity and Security technologies and recommend adoption strategies.

Governance, Risk & Compliance

• Conduct compliance assessments and evidence gathering utilizing frameworks such as:
• Security Control Framework (CSF)
• CIS Controls
• PCI-DSS
• NIST
• Lead periodic entitlement reviews and access certification processes.

Automation & Operational Excellence

• Develop automation solutions using PowerShell and Microsoft Graph.
• Streamline identity operations through process improvements and workflow automation.
• Improve operational monitoring, logging, and alerting capabilities.
• Create repeatable processes that increase security and reduce operational overhead.

Collaboration & Leadership

• Serve as an Identity and Access Management subject matter expert.
• Partner with Infrastructure, Cyber Security, Cloud Engineering, HR, and Application teams.
• Mentor junior engineers and analysts.
• Provide technical guidance during security reviews and project engagements.
• Communicate technical risks and recommendations to management and business stakeholders.

Required Qualifications

Education

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline.
• Equivalent work experience may be considered.

Experience

• 5+ years of cybersecurity, systems engineering, or IAM experience.
• 3+ years administering Microsoft Entra ID / Azure Active Directory.
• Experience supporting hybrid identity architectures.
• Experience with audit, compliance, and governance activities.
• Experience supporting enterprise-scale Microsoft 365 environments.

Certifications (Preferred)

• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Azure Security Engineer Associate
• Microsoft Certified: Cybersecurity Architect Expert
• CISSP, Security+, or equivalent industry certifications

Salary Range: $117,800 to $147,600 annually + bonus eligibility. This is the expected salary range for this position. Ultimately, in determining pay, we’ll consider the successful candidate’s location, experience, and other job-related factors.