Job description

About the Team You will be part of the Identity and Access Management (IAM) function within the Cyber Security organization. The team is responsible for securing identities, managing access to critical systems, and supporting strong authentication and authorization controls across the enterprise. The IAM function is a critical domain within the WSI Security Governance program. The IAM team’s mission is to protect the organization by ensuring the right individuals have the right access at the right time—while maintaining compliance and enabling business productivity. About the Role As an Information Security Analyst – Identity & Access Management, you will support the daily operation of enterprise identity services, including access provisioning, identity lifecycle activities, authentication support, privileged access requests, and identity governance. This hands-on operational role partners with IAM Engineering and business stakeholders to resolve access issues, maintain accurate access records, support SOX and PCI DSS controls, and improve repeatable processes. The position primarily supports business-hours operations with occasional escalations. Responsibilities • Process Joiner/Mover/Leaver activities, including timely provisioning, modification, and deprovisioning of user access in accordance with approved requests and established controls. • Validate access requests, required approvals, role assignments, and least-privilege requirements; coordinate with application owners and IT teams to resolve exceptions. • Support access reviews, periodic certifications, entitlement validation, and remediation of inappropriate or outdated access. • Provide operational support for single sign-on (SSO), multi-factor authentication (MFA), and user authentication issues using Ping Identity, Microsoft Entra ID, and Active Directory. • Process privileged access requests and support approved workflows and access controls in Delinea Privileged Access Management (PAM). • Assist with service account and non-human identity inventory, ownership validation, access reviews, and lifecycle governance, including Clutch Security workflows. • Investigate IAM service tickets and access-related incidents; document troubleshooting, identify root causes where possible, and escalate complex platform issues to IAM Engineering or Security Operations. • Support SailPoint IdentityIQ identity governance workflows, including provisioning activities, access certifications, and reconciliation follow-up. • Collect, validate, and organize evidence for SOX and PCI DSS audits; help address control exceptions and access-related findings. • Identify opportunities to simplify manual work, improve operational procedures, and assist with basic scripting or workflow automation under engineering guidance. • Maintain accurate ticket notes, standard operating procedures, and knowledge articles; collaborate with HR, IT Service Desk, Infrastructure, application owners, Security Operations, and Audit/Compliance teams. Criteria • 1–2 years of experience in information security, identity and access management, IT service operations, or a related technical field. • Bachelor’s degree in a related field or equivalent work experience. • Working understanding of identity lifecycle management, access provisioning, least privilege, and role-based access controls. • Experience investigating user access issues, managing service requests, and following approval and change-control procedures. • Familiarity with Active Directory, Microsoft Entra ID, or comparable directory and identity services. • Foundational understanding of SSO, MFA, privileged access, and security controls related to access management. • Ability to document work accurately, manage competing priorities, protect sensitive information, and collaborate across technical and business teams. • Strong communication, analytical, customer service, and troubleshooting skills. Preferred Qualifications • Operational experience with Ping Identity, SailPoint IdentityIQ, Delinea PAM, Microsoft Entra ID, Active Directory, or Clutch Security preferred. • Experience supporting access certifications, identity governance, service account controls, and non-human identity oversight preferred. • Familiarity with SOX and PCI DSS access-control requirements and audit evidence collection preferred. • Basic PowerShell or Python scripting experience, or participation in IAM workflow automation and process improvements preferred. • Experience supporting IAM in a large enterprise or hybrid on-premises and cloud environment preferred. • This role requires being onsite in the Rocklin, CA office Monday through Thursday. Our Culture & Values We believe that taking care of our people is vital to our success and we strive to offer equitable and transparent practices for all. We prioritize connection, growth, and wellbeing. People First Putting People First means investing in overall well-being and opportunities to grow and advance within the organization. Depending on the position and location, here are a few highlights of what benefits may be available: Benefits • A generous discount on all WSI brands • A 401(k) plan and other investment opportunities • Paid vacations, holidays, and time off to volunteer • Health benefits, dental and vision insurance, including same-sex domestic partner benefits • Tax-free commuter benefits • A wellness program that supports your physical, financial and emotional health Continued Learning • In-person and online learning opportunities through WSI University • Cross-brand and cross-function career opportunities • Resources for self-development • Advisor (Mentor) program • Career development workshops, learning programs, and speaker series WSI will not now or in the future commence an immigration case or "sponsor" an individual for this position (for example, H-1B or other employment-based immigration). This role is not eligible for relocation assistance. Williams-Sonoma, Inc. is an Equal Opportunity Employer. Williams-Sonoma, Inc. will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance, or other applicable state or local laws and ordinances. The expected starting pay range for this position is $75,000 - $90,000. Applicable pay ranges may differ across markets. Actual pay will be determined based on experience and other job-related factors permitted by law. In addition to competitive pay, compensation may include a variety of other components like benefits, paid time off, merit, and bonus opportunities. You will be part of the Identity and Access Management (IAM) function within the Cyber Security organization. The team is responsible for securing identities, managing access to critical systems, and supporting strong authentication and authorization controls across the enterprise. The IAM function is a critical domain within the WSI Security Governance program. The IAM team’s mission is to protect the organization by ensuring the right individuals have the right access at the right time—while maintaining compliance and enabling business productivity.

Requirements

Must-haves

About the Team
The IAM team’s mission is to protect the organization by ensuring the right individuals have the right access at the right time—while maintaining compliance and enabling business productivity.
Process Joiner/Mover/Leaver activities, including timely provisioning, modification, and deprovisioning of user access in accordance with approved requests and established controls.
Validate access requests, required approvals, role assignments, and least-privilege requirements; coordinate with application owners and IT teams to resolve exceptions.
Support access reviews, periodic certifications, entitlement validation, and remediation of inappropriate or outdated access.
Provide operational support for single sign-on (SSO), multi-factor authentication (MFA), and user authentication issues using Ping Identity, Microsoft Entra ID, and Active Directory.
Process privileged access requests and support approved workflows and access controls in Delinea Privileged Access Management (PAM).
Assist with service account and non-human identity inventory, ownership validation, access reviews, and lifecycle governance, including Clutch Security workflows.
Investigate IAM service tickets and access-related incidents; document troubleshooting, identify root causes where possible, and escalate complex platform issues to IAM Engineering or Security Operations.
Support SailPoint IdentityIQ identity governance workflows, including provisioning activities, access certifications, and reconciliation follow-up.
Collect, validate, and organize evidence for SOX and PCI DSS audits; help address control exceptions and access-related findings.
Identify opportunities to simplify manual work, improve operational procedures, and assist with basic scripting or workflow automation under engineering guidance.
Maintain accurate ticket notes, standard operating procedures, and knowledge articles; collaborate with HR, IT Service Desk, Infrastructure, application owners, Security Operations, and Audit/Compliance teams.
1–2 years of experience in information security, identity and access management, IT service operations, or a related technical field.
Bachelor’s degree in a related field or equivalent work experience.

Nice-to-haves

Operational experience with Ping Identity, SailPoint IdentityIQ, Delinea PAM, Microsoft Entra ID, Active Directory, or Clutch Security preferred.
Experience supporting access certifications, identity governance, service account controls, and non-human identity oversight preferred.
Familiarity with SOX and PCI DSS access-control requirements and audit evidence collection preferred.
Basic PowerShell or Python scripting experience, or participation in IAM workflow automation and process improvements preferred.
Experience supporting IAM in a large enterprise or hybrid on-premises and cloud environment preferred.
This role requires being onsite in the Rocklin, CA office Monday through Thursday.
Our Culture & Values
We believe that taking care of our people is vital to our success and we strive to offer equitable and transparent practices for all. We prioritize connection, growth, and wellbeing.
People First

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

python

Platform: oracle-cloud
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off

Wellness