Sr Analyst - Identity & Access Govern

Why Work for Frontier Airlines? 

At Frontier, we believe the skies should be for everyone. We deliver on this promise through our commitment to Low Fares Done Right. This is more than our tagline - it’s our driving philosophy. Every member of Team Frontier has an important role to play in bringing this vision to life.  Our successful business model allows travelers to take advantage of our fast-growing route network while our bundled and unbundled pricing options allow our customers to personalize their travel experience and only pay for the services they need – saving them money along the way.   

What We Stand For  

Low Fares Done Right is our mission and we strive to bring it to life every day.   Our ‘Done Right’ promise  means delivering not only affordable prices, but making travel friendly and easy for our customers.  To do this, we put a great deal of care into every decision and action we take. We must be efficient with the use of our resources and make smart decisions about how we run our business. We must also innovate and be pioneers -   we’re not afraid to try new things.  While our business requires us to fly high in the air, we also consider ourselves down-to-earth in our approach, creating a warm and friendly experience that truly demonstrates Rocky Mountain Hospitality. 

Work Perks  

At Frontier, we like to think we’re creating something very special for our team members.  Work is why we’re here, but the perks are nice too:  

• Flight benefits for you and your family to fly on Frontier Airlines
• Buddy passes for your friends so they can experience what makes us so great
• Discounts throughout the travel industry on hotels, car rentals, cruises and vacation packages
• Discounts on cell phone plans, movie tickets, restaurants, luggage and over 2,000 other vendors
• Enjoy a ‘Dress for your Day’ business casual environment
• Flexible work schedules that support work/life balance
• Total Rewards program including a competitive base salary, short term incentives, long-term incentives, paid holidays, 401(k) plan, vacation/sick time and medical/dental/vision insurance that begins the 1^st of the month following your hire date.
• We play our part to make a difference.  The HOPE League, Frontier Airlines’ non-profit organization, is dedicated to providing employees financial assistance during catastrophic hardship

Who We Are  

Frontier Airlines is a leading ultra-low cost carrier headquartered in Denver, Colorado. With a mission to deliver Low Fares Done Right, the company provides affordable, convenient and accessible air travel throughout the U.S., Caribbean, Mexico and Latin America. Frontier’s highly fuel-efficient, all-Airbus fleet is among the youngest and most modern of any carrier within the U.S. That, combined with the airline’s many weight-saving initiatives and focus on operational efficiencies, makes Frontier America’s Greenest Airline.* Each Frontier Airlines plane tail features a special animal with a unique name and backstory. Many of the featured species are endangered or threatened, part of the airline’s commitment to underscore and raise awareness for their plight. Frontier serves approximately 100 destinations throughout North America and operates 500-plus daily flights, on average. The airline employs more than 7,000 team members and has crew bases in more than a dozen U.S. cities. Frontier Airlines., Inc., is a subsidiary of Frontier Group Holdings, Inc. (NASDAQ: ULCC).     

* Frontier is the most fuel-efficient of all major U.S. carriers when measured by ASMs per fuel gallon consumed.

What Will You Be Doing?

Frontier is looking for a talented and experienced Sr Analyst of Identity & Access Governance (IAG) to join our growing Cybersecurity IAG team. This role is perfect for an identity analyst with experience in Identity Governance & Administration (IGA) systems, passionate in access control disciplines.

The IAG Sr Analyst will support functional and technical aspects of the Identity Access Governance function. The Sr Analyst will support functions that support authentication, authorization, profile management, and federation at Frontier Airlines. The Sr Analyst is responsible for supporting the IAG program maturity, implementing and increasing adoption by onboarding technology platforms, maturing processes, and providing actionable guidance on security standards & best practices. The IAG Sr Analyst will support access provisioning (joiners/movers/leavers), governance, and administrative needs across the Frontier organization. The candidate will work on the adoption and expansion of the corporate Identity Governance & Administration (IGA) platform. 

The IAG Sr Analyst will expand the centralized access management architecture, to mature the automation of provisioning and governance for enterprise applications. The Sr Analyst will collaborate with cross-functional teams to implement and support secure identity and access management solutions for the organization. The candidate will work to ensure that employees, business partners, and contractors have the right access to the right systems at the right times for the right reasons.

Essential Functions

• Support the design, configuration, and implementation of an Identity Governance & Administration (IGA) solution that provides capabilities to manage identity lifecycles (of joiners, movers, leavers) and entitlement reviews (e.g., user access reviews, privileged access reviews).
• Work with internal stakeholders/business partners to gather and document IGA requirements for new and existing applications and systems.
• Work closely with stakeholders to understand their requirements, translate them into technical specifications, and design/implement IGA solutions that meet those requirements.
• Leading IAM projects and initiatives and developing strategies for identity and access management.
• Assist with the compliance requirements for implementing new authoritative sources.
• Conduct critical application Password Audits to satisfy SOX requirements.
• Support technical functions that automate provisioning and de-provisioning of user access, managing entitlements, managing roles, and enforcing policies for compliance purposes.
• Develop and maintain workflows, rules, and policies within IGA platforms for managing access requests, approvals, and access certification.
• Configure/manage access certification campaigns, developing access rules, and managing access workflows.
• Monitor, manage, and troubleshoot the IGA platform environment to ensure its high availability, stability, reliability, and security.
• Perform regular IGA solution maintenance/upgrades, troubleshoot, resolve issues, and ensure the system’s performance and availability.
• Mentoring junior analysts and providing guidance on best practices.
• Analyze system requirements, including identifying interactions and appropriate interfaces between affected components and sub systems.
• Work collaboratively with vendors, consultants, and other third-party service providers to implement and maintain IGA solutions.
• Providing consulting and subject matter expertise to various business units and ensuring compliance with internal policies and regulatory requirements.
• Develop and/or review system specifications, including output requirements, flow charts and technical diagrams.
• Supports software system testing & validation procedures, programming, and documentation.
• Collaborate with cross-functional teams to develop IAG strategies, roadmaps, and standards that align with business goals and objectives.
• Provide technical expertise in the areas of access control, identity governance, and authentication & authorization to ensure compliance with industry regulations and standards such as SOX, PCI-DSS, and TSA.
• Handling complex IGA issues and providing advanced troubleshooting support.
• Work collaboratively with other teams to develop and implement security policies, procedures, and best practices that support the organization's overall IAG posture.
• Develop and maintain detailed documentation on IGA solutions, processes, and procedures to ensure compliance with internal policies and regulatory requirements.
• Work collaboratively with internal and external auditors to provide evidence of compliance with IAG policies/procedures and develop remediation plans for any identified gaps.
• Provide training and support to end-users on IAG-related topics to ensure that they are able to access the resources they need, support joiner/mover/leaver provisioning processes, while adhering to security policies and procedures.
• Provide training and support to end-users on IAG -related topics, including self-service password reset, access requests, and entitlement reviews.
• Stay up to date with emerging IGA technologies and best practices and provide recommendations for improving the IGA solutions and processes to meet the evolving needs of the organization.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or a related field; or equivalent work experience (required).
• 5+ years of experience configuring, implementing, and maintaining a packaged or custom IGA solution, such as: Saviynt, SailPoint, ForgeRock, or equivalent tool (required).
• 4+ years of experience in configuring, implementing, and maintaining SailPoint IdentityNow and/or SailPoint IdentityIQ (required).
• Experience with Microsoft Azure Active Directory (required).
• Experience using PowerShell for reporting and automation (required).
• Experience using database connections and SQL queries (required)
• Working knowledge in infrastructure technologies such as Linux, Windows, and LDAP (required).
• Experience on SailPoint IdentityNow with developing custom workflows, connectors, rules, and policies (required).
• Certifications such as SailPoint Certified IdentityNow Engineer (desired).
• Certifications such as CISSP, CISM, or CISA (desired).

Knowledge, Skills, and Abilities

• Proficient in developing and maintaining policies, standards, and guidance artifacts.
• Expert knowledge in core identity domains: Identity Governance & Administration (IGA), Privileged Access Management, Authentication, Authorization, and Identity Lifecycle Management.
• In-depth knowledge of Identity and Access Management concepts, technologies, and best practices, including user provisioning, access certification, role management, and entitlements management.
• Hands-on experience designing, implementing, and deploying IGA solutions in an enterprise environment, such as Azure AD, Okta, SailPoint, Saviynt, ForgeRock.
• Subject matter expert for IAG including: role-based access control (RBAC), access request, and certification.
• Demonstrates extensive understanding of IAG concepts such as directory services, SSO, federation, MFA, provisioning, access certification, roles, and segregation of duties (SOD).
• In-depth knowledge of legacy and modern authentication protocol differences (such as RADIUS, SAML, OpenID, Oauth, and LDAP).
• Deep understanding of SailPoint IdentityNow architecture and components, and be able to perform regular maintenance and upgrades, troubleshoot and resolve issues, and ensure system performance & availability.
• Security best practices for Windows-based and Linux-based systems including authentication principles and components.
• Experience in implementing and supporting IGA solutions in large and complex environments.
• Solid understanding of security and compliance regulations such as GDPR, SOX, PCI DSS, and HIPAA.
• Strong problem-solving and troubleshooting skills with the ability to analyze complex issues, identify root causes, and implement effective solutions.
• Excellent communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams and business partners.
• Strong project management skills, with the ability to manage multiple projects simultaneously and deliver on time and within budget.
• Exceptional consultative and interpersonal skills that have resulted in business relationships of impeccable trust, confidence, and results.
• Exhibit leadership skills required to manage resources as well as projects deliverables.
• Knowledge of industry trends and current and emerging risks.
• Self-directed professional with strong work ethics and excellent organizational skills.
• Strong leadership and negotiation skills with business and technical group.

Equipment Operated

Computer and IGA-related infrastructure.

Work Environment

Typical office environment, adequately heated and cooled.

Will require being on call for afterhours and weekend support.

Physical Effort

Light physical effort required by handling objects up to 20 pounds occasionally and/or up to 10 pounds frequently.

Supervision Received

General Direction:  The incumbent normally receives little instruction on day-to-day work and receives general instructions on new assignments.

Salary Range: Please note: $90,094 - $119,583 this posting has a closing date of on or before midnight 9.30.26 MT.

Positions Supervised

None

Workplace Policies

Disclaimer: The above statements are intended only to describe the general nature and level of work required of the referenced position; they are not intended to be an exhaustive list of all responsibilities, duties, and skills required of individuals in this position. Please be advised that duties and expectations of this position may be subject to change.

Frontier Airlines, Inc. is an equal opportunity employer and, as such, is committed to providing equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, national origin, age, marital status, veteran status, sexual orientation, gender identity or expression, disability status, pregnancy, genetic information, citizenship status or any other basis protected by federal, state, or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Frontier Airlines is a Zero Tolerance Drug-Free Workplace. All prospective DOT safety-sensitive employees are subject to pre-employment testing for the following drugs and their metabolites: Marijuana, Cocaine, Amphetamines, Opioids and Phencyclidine (PCP). Further, any DOT safety-sensitive job applicant who is found to have tested positive on any required drug or alcohol test at a former employer will be considered ineligible for employment with Frontier.

Colorado Residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.