Business Systems Analyst – Identity & Access Management (IAM) / Authorization – Global Employer Services Technology Center

We are seeking a motivated and analytical Business Systems Analyst II (BSA2) with 3-4 years of experience in Identity and Access Management (IAM) and Authorization to support Deloitte's GlobalAdvantage IAM and access enforcement initiatives.

The successful candidate will work closely with Product Owners, Security Architects, Engineers, and business stakeholders to define, document, and deliver secure authorization and access management capabilities across GlobalAdvantage applications and services.

The ideal candidate will have a strong understanding of authorization concepts, including Policy-Based Access Control (PBAC), Role-Based Access Control (RBAC), and modern entitlement models. Experience translating business requirements into authorization policies, access rules, workflows, and user stories is highly desirable. Exposure to Identity Governance processes and platforms is beneficial but not the primary focus of this role.

Candidates with hands-on technical skills in scripting, APIs, or application development will be preferred, as the role often requires defining Authorization policies as code, collaboration with engineering teams and validation of technical solutions.

Key Job Responsibilities:

Partner with Product Owners, Security Architects, Engineers, and business stakeholders to gather, analyze, and document business requirements related to authorization, access management, and identity services.

Support the definition and implementation of Policy-Based Access Control (PBAC), Attribute-Based Access Control (ABAC), and entitlement management capabilities across enterprise applications.

Translate business policies, compliance requirements, and access rules into detailed functional requirements, user stories, acceptance criteria, and process flows.

Assist in the analysis and design of authorization models, roles, permissions, policy structures, and entitlement hierarchies.

Work with engineering teams to define policy evaluation requirements, authorization decision flows, and integration patterns for access management solutions.

Facilitate stakeholder discussions, workshops, and requirement-gathering sessions to understand access control and authorization needs.

Support backlog management activities, including story refinement, requirements clarification, and testing support within Azure DevOps (ADO), Jira, or similar platforms.

Participate in solution testing, user acceptance testing (UAT), and validation activities to ensure implemented authorization capabilities meet business and security requirements.

Analyze existing access models and business processes to identify opportunities to improve usability, security, scalability, and operational efficiency.

Support API, application, and identity integration efforts by documenting requirements, data flows, access models, and business rules.

Contribute to process documentation, policy catalogs, entitlement inventories, business workflows, and stakeholder-facing materials.

Collaborate with governance, risk, compliance, and security teams to ensure access control solutions align with enterprise standards and security objectives.

Support Identity Governance processes, including access reviews, provisioning workflows, and entitlement management, as needed.

Strong analytical and problem-solving skills.

Ability to learn quickly and work effectively in a fast-paced environment.

Excellent verbal and written communication skills.

Detail-oriented with a structured approach to requirements analysis.

Comfortable working with both technical and non-technical stakeholders.

Curious and eager to understand security, access management, and emerging authorization technologies.

Able to navigate ambiguity and drive requirements toward actionable outcomes.

Team-oriented with a collaborative mindset.

Shift Timings: 11:00 AM to 8:00 PM

Location: Hyderabad

B.E / B.Tech

Relevant IGA, IAM or AWS Security Certifications

Key skills required

3-4 years of experience as a Business Analyst, Systems Analyst, Product Analyst, or similar role.

Strong understanding of authorization concepts including: Policy-Based Access Control (PBAC)

Attribute-Based Access Control (ABAC)

Role-Based Access Control (RBAC)

Entitlement Management

Experience gathering business requirements and translating them into user stories, functional specifications, acceptance criteria, and process flows.

Familiarity with authorization models, access policies, permissions, and security controls within enterprise applications.

Experience working with Agile delivery teams and managing requirements through Azure DevOps, Jira, or similar tools.

Understanding of authentication and access management concepts including SSO, MFA, identity federation, and authorization services.

Familiarity with APIs, REST services, and application integration patterns.

Strong documentation and process modeling skills using Visio, Lucidchart, or similar tools.

Experience supporting testing, validation, and defect triage activities.

Experience supporting or implementing PBAC solutions and policy-driven authorization models.

Exposure to policy-as-code frameworks such as Cedar, Open Policy Agent (OPA), or Rego.

Exposure to Agentic AI software development, including AI agents, agent frameworks, MCP/API integrations, prompt orchestration, and implementation of authorization, identity, and policy controls (PBAC/ABAC) within agent-driven workflows.

Hands-on experience with scripting or programming languages such as Python, JavaScript, TypeScript, PowerShell, or Java.

Ability to read, understand, and troubleshoot application code, APIs, authorization policies, and technical documentation.

Familiarity with Identity Governance platforms such as SailPoint, Saviynt, or custom governance solutions.

Experience supporting access reviews, access requests, and entitlement lifecycle processes.

Experience working with security, compliance, audit, or risk management teams.

Knowledge of modern authorization architectures and distributed application security patterns.