Sr. Analyst, Identity and Access Management, (IAM), Privileged Access (PAM)

The Identity and Access Management (IAM) Senior Analyst will play a key role in driving the organization’s IAM program, with a strong focus on Privileged Access Management (PAM). The role is responsible for advancing and scaling PAM across complex environments, ensuring privileged access is secure, reliable, and well-integrated into enterprise operations. Responsibilities include driving onboarding at scale, building automation through scripting and APIs, resolving complex integration issues, and partnering with administrators to embed PAM into enterprise processes. In addition, the analyst will contribute to broader IAM initiatives, collaborating with global IT teams to mature identity and access processes and deliver consistent security solutions across the enterprise.                              

Responsibilities

• Support and maintain the PAM solutions, policies, and access controls.  Provision access and work with application teams and infrastructure teams to secure our environments.          

• Troubleshoot and automate identity and access management systems, including privilege access tool and services. 

• Handle level III and Level IV incidents escalated incidents, analyse root causes and drive resolutions in a timely manner. 

• Work with end users on any issues that they are having with our solutions.  

• Drive user adoption and success by ensuring business partners are utilizing IAM solutions through proactive organizational education.

• Manage and document operational functions in the IAM environment with special emphasis on protecting company assets with controlled access and implementing and monitoring access control standards                                                                         

• Monitor and conduct frequent IAM tool audits to measure effectiveness of policies, procedures and processes and internal controls.                                                                                  

• Performs other duties as assigned

Requirements

• No formal degree required - strong experience in IAM and PAM solutions is valued over formal education.

• CyberArk certifications (Defender, Sentry, Trustee) preferred.

• Broader IAM/PAM certifications (e.g., CISSP, CISM, or vendor equivalents) also an advantage.                                                     

• Experience onboarding and managing privileged access across Windows, Linux/Unix, databases, cloud platforms, and network devices.

• Proficiency in automation and scripting, with strong skills in PowerShell and the ability to leverage REST APIs to automate CyberArk and IAM operations at scale.

• Experience with other CyberArk suite products such as Endpoint Privilege Manager (EPM) or Secrets Manager.

• Broad exposure to IAM/PAM ecosystem tools (identity governance, auditing, AD/Entra, monitoring) with ability to adapt to new technologies.

• Ability to design and present technical PAM solutions to stakeholders, and to partner with audit/compliance teams to meet regulatory requirements.

• Experience deploying and maintaining CyberArk infrastructure components, including setup, upgrades, and configuration in enterprise environments.

• Strong troubleshooting skills across operating systems and underlying infrastructure supporting CyberArk (Windows Server, networking, databases, certificates, authentication services).

• This position is classified as “remote.”  As a remote role, it allows employees to work full-time from their home. It may also require regular travel to Carnival headquarters in Miami, FL for in-office collaboration.  Sourcing of candidates is primarily done in Carnival’s remote hubs of Orlando, Tampa, Atlanta, Houston, and Dallas.  If the search is extended past those areas, candidates must be located in one of the following U.S. states:  FL, GA, TX and NC

At Carnival, your total rewards package is much more than your base salary. All non-sales roles participate in an annual cash bonus program, while sales roles have an incentive plan. Director and above roles may also be eligible to participate in Carnival’s discretionary equit