Lead Analyst, Identity & Access Management

Position Objective:

Responsible for day-to-day Identity and Access Management (IAM) operations for Alibaba Cloud (AliCloud) environments, ensuring secure, compliant, and efficient access to cloud resources.

The role focuses on RAM (Resource Access Management) operations, access lifecycle management, and audit support, while collaborating with enterprise identity platforms and infrastructure teams to maintain consistent access governance across hybrid environments.

Roles and Responsibilities:

• Operate and support AliCloud IAM (RAM) services, including users, roles, groups, and policies, to ensure compliance with security standards and operational requirements.
• Manage access lifecycle activities for AliCloud accounts and resources, including provisioning, modification, deprovisioning, and privileged access support。
• Administer AccessKey lifecycle controls, including issuance tracking, rotation support, exception handling, and risk mitigation in accordance with security policies.
• Support IAM incident and request resolution, performing technical analysis and coordinating with cloud, infrastructure, and security teams to resolve access-related issues.
• Assist with audit, access review, and compliance activities by maintaining accurate access inventories, evidence, and documentation (e.g. ActionTrail-based records).
• Contribute to operational improvement initiatives by identifying process gaps and applying basic automation or standardization using scripting.
• Maintain IAM operational documentation, including procedures, controls, and runbooks.

Minimum Job Requirements:

• 3–4 years experience in Identity & Access Management, Information Security, or cloud operations.
• Hands-on experience with Alibaba Cloud IAM (RAM) or similar cloud IAM platforms.
• Exposure to cloud access lifecycle management and access governance processes.
• Working knowledge of Linux/Unix, Windows, or database platforms from an access control perspective.
• Understanding of enterprise IAM or cloud identity platforms (e.g. Microsoft Entra ID / Azure AD).
• Ability to write or maintain basic scripts using Shell, PowerShell, or Python for automation or reporting tasks.
• Strong analytical and troubleshooting skills.
• Good written and verbal communication skills in English.
• Degree in Information Technology, Information Security, or related disciplines.