Important Application Submission InformationIn order to ensure your application is successfully received before the job posting expires, please submit your application by 11:59 PM on Wednesday, July 8, 2026<h2>More than a career - a chance to make a difference in people's lives.</h2>Build an exciting, rewarding career with us – help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.<div><div><h2>Position Summary </h2><h2></h2></div><div>We are seeking a Cybersecurity IAM Analyst with a strong focus on modern authentication, Zero Trust, and identity security controls. This position operates within a large-scale, highly regulated, and heavily audited environment, requiring alignment to cybersecurity frameworks and the ability to deliver solutions that meet both security and compliance requirements. This role provides technical knowledge and experience, supports key IAM initiatives, and partners across teams to deliver measurable improvements in identity security and authentication practices. </div><div> </div><div><h2>What Success Looks Like in This Role: </h2></div><div><ul><li>Quickly assesses the current IAM and authentication landscape and identifies high-impact opportunities for improvement </li><li>Drives adoption of phishing-resistant MFA and passwordless authentication </li><li>Reduces reliance on legacy authentication methods </li><li>Improves visibility and control over identity-related risk </li><li>Partners effectively with others within Cybersecurity and infrastructure teams to implement practical, scalable identity security solutions </li><li>Influences enterprise-wide improvements in identity governance and access controls </li><li>Leads initiatives with a high degree of ownership while collaborating across teams in a complex, heavily regulated environment </li><li>Builds credibility with stakeholders by delivering clear progress, tangible outcomes, and improved security posture </li><li>Delivers measurable improvements within the first 6 – 12 months, particularly in authentication strength, identity risk reduction, and access control maturity </li></ul></div><div> </div><div><h2>Responsibilities: </h2></div><div><ul><li>Support identity platforms so they operate with high reliability and availability, assist with system upgrades and change activities in alignment with change management processes to minimize business impact. </li><li>Provide support for IAM-related incidents and escalations, partnering with operational teams to resolve issues. </li><li>Develop an understanding of IAM and security concepts, both technical and non-technical </li><li>Communicate in a clear, concise, confident, and well-organized manner through verbal, written, and/or visual means </li><li>Support the implementation of IAM solutions, follow processes and procedures, and understand the Company policies. </li><li>Support efforts to modernize authentication and identity security controls </li><li>Collaborate with security teams to mitigate identity-based risks </li><li>Occasionally work outside of standard business hours to support critical IAM activities, including system maintenance and urgent issues requiring advanced support </li><li>Perform other IAM-related duties as needed to support the evolving business, security, regulatory requirements, and Company goals </li><li>Travel as needed, less than 5% </li></ul></div></div><h2>Basic/Required Qualifications </h2><ul><li>Bachelors degree in Cybersecurity, Computer Science, Management Information Systems</li><li>Minimum 2 years related work experience</li><li>In lieu of Bachelors degree(s) AND 2 year(s) related work experience listed above, High School/GED AND 6 year(s) related work experience</li></ul><h2>Desired Qualifications</h2><div><div><ul><li>Hands-on and working knowledge with: </li><li>Designing and implementation of Microsoft Entra ID and components </li><li>Multi-domain Active Directory (on-premise) and hybrid identity environments </li><li>Designing Conditional Access and MFA solutions </li><li>Implementing and supporting Azure Self-Service Password Reset (SSPR) </li><li>Designing and managing PowerShell/Graph API scripts </li><li>Strong understanding and working knowledge of authentication concepts and identity security best practices  ​</li><li>Excellent verbal, written and presentation communication skills in English </li><li>Ability to multitask across multiple projects </li><li>Eight years of experience with Windows 2012 through 2022, managing multi-domain forests </li><li>Six years of experience with Microsoft Certificate Services for Public Key Infrastructure (PKI) management </li><li>Six years of experience supporting Active Directory Group Policies (GPO), Active Directory Federation Services (ADFS), and Entra ID Connect </li><li>Six years of experience supporting Azure Multi-Factor Authentication (MFA) and Self-Service Password Reset (SSPR) </li><li>Four years of experience designing, creating and maintaining Azure Conditional Access Policies </li><li>Four years of experience designing, creating and managing PowerShell/Graph API scripts </li><li>Three years of experience supporting Privileged Account Management (PAM) systems </li><li>Two years of experience supporting Windows Hello for Business </li><li>Skill in assessing security controls based on cybersecurity principles (e.g., CIS CSC, CMMC, NIST SP 800-53, Cybersecurity Framework, etc.). </li></ul></div></div><h2>Working Conditions</h2><ul><li>Hybrid Mobility Classification – Work will be performed from both remote and onsite locations after the onboarding period. However, hybrid employees should live within a reasonable daily commute to a Duke Energy facility.</li><li>Office Environment</li></ul>#LI-ZM1#LI-HybridTravel Requirements5-15%<h3>Relocation Assistance Provided (as applicable)</h3>No<h3>Represented/Union Position</h3>No<h3>Visa Sponsored Position</h3>No. This is not a Visa Sponsored Position. This role requires the ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future. <h3> </h3><h3>Please note that in order to be considered for this position, you must possess all of the basic/required qualifications.</h3><a href="https://www.duke-energy.com/legal/privacy">Privacy</a><a href="https://www.duke-energy.com/legal/ccpa-opt-out-request-form">Do Not Sell My Personal Information (CA)</a><a href="https://www.duke-energy.com/legal/terms-of-use">Terms of Use</a><a href="https://www.duke-energy.com/customer-service/accessibility">Accessibility</a>

<div class="org-about-module__description">
<div id="ember59" class="ember-view organization-about-module__content-consistant-cards-description">Duke Energy, a Fortune 150 company headquartered in Charlotte, N.C., is one of America&rsquo;s largest energy holding companies. The company&rsquo;s electric utilities serve 8.4 million customers in North Carolina, South Carolina, Florida, Indiana, Ohio and Kentucky, and collectively own 54,800 megawatts of energy capacity. Its natural gas utilities serve 1.7 million customers in North Carolina, South Carolina, Tennessee, Ohio and Kentucky. Duke Energy is executing an ambitious clean energy transition, keeping reliability, affordability and accessibility at the forefront as the company works toward net-zero methane emissions from its natural gas business by 2030 and net-zero carbon emissions from electricity generation by 2050. The company is investing in major electric grid upgrades and cleaner generation, including expanded energy storage, renewables, natural gas and nuclear. Our team is available Monday to Friday from 8 a.m. to 5 p.m. EST. If you suspect an emergency, please call 911.</div>
</div>
<div class="org-about-module__content-improvement">
<div class="org-about-module__content-box">&nbsp;</div>
</div>

Cybersecurity IAM Analyst

Important Application Submission InformationIn order to ensure your application is successfully received before the job posting expires, please submit your application by 11:59 PM on Wednesday, July 8, 2026<h2>More than a career - a chance to make a difference in people's lives.</h2>Build an exciting, rewarding career with us – help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.<div><div><h2>Position Summary </h2><h2></h2></div><div>We are seeking a Cybersecurity IAM Analyst with a strong focus on modern authentication, Zero Trust, and identity security controls. This position operates within a large-scale, highly regulated, and heavily audited environment, requiring alignment to cybersecurity frameworks and the ability to deliver solutions that meet both security and compliance requirements. This role provides technical knowledge and experience, supports key IAM initiatives, and partners across teams to deliver measurable improvements in identity security and authentication practices. </div><div> </div><div><h2>What Success Looks Like in This Role: </h2></div><div><ul><li>Quickly assesses the current IAM and authentication landscape and identifies high-impact opportunities for improvement </li><li>Drives adoption of phishing-resistant MFA and passwordless authentication </li><li>Reduces reliance on legacy authentication methods </li><li>Improves visibility and control over identity-related risk </li><li>Partners effectively with others within Cybersecurity and infrastructure teams to implement practical, scalable identity security solutions </li><li>Influences enterprise-wide improvements in identity governance and access controls </li><li>Leads initiatives with a high degree of ownership while collaborating across teams in a complex, heavily regulated environment </li><li>Builds credibility with stakeholders by delivering clear progress, tangible outcomes, and improved security posture </li><li>Delivers measurable improvements within the first 6 – 12 months, particularly in authentication strength, identity risk reduction, and access control maturity </li></ul></div><div> </div><div><h2>Responsibilities: </h2></div><div><ul><li>Support identity platforms so they operate with high reliability and availability, assist with system upgrades and change activities in alignment with change management processes to minimize business impact. </li><li>Provide support for IAM-related incidents and escalations, partnering with operational teams to resolve issues. </li><li>Develop an understanding of IAM and security concepts, both technical and non-technical </li><li>Communicate in a clear, concise, confident, and well-organized manner through verbal, written, and/or visual means </li><li>Support the implementation of IAM solutions, follow processes and procedures, and understand the Company policies. </li><li>Support efforts to modernize authentication and identity security controls </li><li>Collaborate with security teams to mitigate identity-based risks </li><li>Occasionally work outside of standard business hours to support critical IAM activities, including system maintenance and urgent issues requiring advanced support </li><li>Perform other IAM-related duties as needed to support the evolving business, security, regulatory requirements, and Company goals </li><li>Travel as needed, less than 5% </li></ul></div></div><h2>Basic/Required Qualifications </h2><ul><li>Bachelors degree in Cybersecurity, Computer Science, Management Information Systems</li><li>Minimum 2 years related work experience</li><li>In lieu of Bachelors degree(s) AND 2 year(s) related work experience listed above, High School/GED AND 6 year(s) related work experience</li></ul><h2>Desired Qualifications</h2><div><div><ul><li>Hands-on and working knowledge with: </li><li>Designing and implementation of Microsoft Entra ID and components </li><li>Multi-domain Active Directory (on-premise) and hybrid identity environments </li><li>Designing Conditional Access and MFA solutions </li><li>Implementing and supporting Azure Self-Service Password Reset (SSPR) </li><li>Designing and managing PowerShell/Graph API scripts </li><li>Strong understanding and working knowledge of authentication concepts and identity security best practices  ​</li><li>Excellent verbal, written and presentation communication skills in English </li><li>Ability to multitask across multiple projects </li><li>Eight years of experience with Windows 2012 through 2022, managing multi-domain forests </li><li>Six years of experience with Microsoft Certificate Services for Public Key Infrastructure (PKI) management </li><li>Six years of experience supporting Active Directory Group Policies (GPO), Active Directory Federation Services (ADFS), and Entra ID Connect </li><li>Six years of experience supporting Azure Multi-Factor Authentication (MFA) and Self-Service Password Reset (SSPR) </li><li>Four years of experience designing, creating and maintaining Azure Conditional Access Policies </li><li>Four years of experience designing, creating and managing PowerShell/Graph API scripts </li><li>Three years of experience supporting Privileged Account Management (PAM) systems </li><li>Two years of experience supporting Windows Hello for Business </li><li>Skill in assessing security controls based on cybersecurity principles (e.g., CIS CSC, CMMC, NIST SP 800-53, Cybersecurity Framework, etc.). </li></ul></div></div><h2>Working Conditions</h2><ul><li>Hybrid Mobility Classification – Work will be performed from both remote and onsite locations after the onboarding period. However, hybrid employees should live within a reasonable daily commute to a Duke Energy facility.</li><li>Office Environment</li></ul>#LI-ZM1#LI-HybridTravel Requirements5-15%<h3>Relocation Assistance Provided (as applicable)</h3>No<h3>Represented/Union Position</h3>No<h3>Visa Sponsored Position</h3>No. This is not a Visa Sponsored Position. This role requires the ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future. <h3> </h3><h3>Please note that in order to be considered for this position, you must possess all of the basic/required qualifications.</h3><a href="https://www.duke-energy.com/legal/privacy">Privacy</a><a href="https://www.duke-energy.com/legal/ccpa-opt-out-request-form">Do Not Sell My Personal Information (CA)</a><a href="https://www.duke-energy.com/legal/terms-of-use">Terms of Use</a><a href="https://www.duke-energy.com/customer-service/accessibility">Accessibility</a>

Cybersecurity IAM Analyst

About the Job

About the Company

Duke Energy

Similar Jobs

Global IT Security Expert - OT

Global IT Security Expert - OT

Global IT Security Expert - IAM

Global IT Security Expert - IAM

Information Security Analyst

Information Security Analyst

Cyber Security Specialist

Cyber Security Specialist

Information Security Analyst- PAM

Information Security Analyst- PAM

IT Identity and Access Management (IAM) Engineer

IT Identity and Access Management (IAM) Engineer

IT Security Analyst

IT Security Analyst

Cybersecurity & Compliance Administrator

Cybersecurity & Compliance Administrator

Information Security Manager

Information Security Manager

Engineer IV, Cyber DevSecOps

Engineer IV, Cyber DevSecOps