Identity & Access Management Operations Analyst II (Identity & Access Management Ops) Full Time NEW

Although we’re an apparel and footwear-focused company, technology is central to everything we do. Columbia Sportswear’s Digital Technology (CDT) teams enable an IT infrastructure across four global brands, a global supply chain, and 500+ geographically dispersed stores. These teams support in-store, mobile, and data platforms to enhance customer interface and service in an ever-evolving industry.

The Identity and Access Management Operations (IAM Ops) team supports identity lifecycle management, access administration, identity governance and privileged access management for key systems with Columbia’s global landscape. The Information Security Analyst provides first level support for the team.

How You’ll Make a Difference

• Identity Lifecycle Management:
• Administer and maintain user identities across SAP, Active Directory, AS400, D365 and other key applications.
• Ensure timely provisioning, modification, and deprovisioning of access based on role-based access controls (RBAC).
• Support onboarding/offboarding processes and access reviews.
• Access Governance & Compliance:
• Collaborate with audit and compliance teams to support SOX, GDPR, and other regulatory requirements.
• Monitor and remediate access violations and segregation of duties (SoD) conflicts, especially within SAP and D365.
• Assist in periodic access certification campaigns.

YOU HAVE

• 3+ years of experience in Identity & Access Management or related IT security roles.
• Hands-on experience with SAP, AS400, Active Directory or other key applications
• Familiarity with IGA tools (e.g., SAP GRC, SailPoint, Saviynt, or similar).
• Understanding of IAM concepts, principles, and best practices, including RBAC, SoD, Access Reviews, etc.
• Strong analytical and problem-solving skills.
• Strong interpersonal and service delivery skills

YOU ARE

• An effective communicator with a focus on customer satisfaction
• Knowledgeable of industry and regulatory security standards and frameworks (e.g., NIST CSF, SOX, PCI/DSS, GDPR).
• Able to work both individually and as part of a team.

#Hybrid

This job description is not meant to be an all-inclusive list of duties and responsibilities, but constitutes a general definition of the position’s scope and function in the company.