[Remote] Business Analyst - Policy-Based Access Control (PBAC) / Identity & Access Management (IAM)

Note: The job is a remote job and is open to candidates in USA. EPAM Systems is seeking an experienced Business Analyst to help translate business needs into scalable security solutions, ensuring alignment between stakeholders and engineering teams. The ideal candidate will have strong analytical skills and deep knowledge of IAM concepts and policy-driven access models.ResponsibilitiesBe self-driven with minimal daily oversight; gather, analyze, and document business and functional requirementsCollaborate with business stakeholders, security architects, and engineering teams to define PBAC use cases and access control modelsTranslate business requirements into policy definitions, decision flows, and acceptance criteria for implementation teamsFacilitate workshops to identify access scenarios across workforce and customer-facing applications, including edge cases and regulatory needsDefine and document attributes required for PBAC decisioning, including identity, role, device, transaction, risk, and contextual data elementsWork with engineering teams to ensure proper integration points for Policy Decision Point (PDP) and Policy Enforcement Points (PEP) are well understood and implementedSupport development and validation of policy rules (both graphical and code-based representations where applicable)Document end-to-end workflows, including policy lifecycle, exception handling, and audit requirementsPartner with compliance and risk teams to ensure policies meet regulatory and audit expectations, including traceability and reportingSupport user acceptance testing (UAT) by defining test scenarios, validating outcomes, and ensuring alignment with business intentMaintain clear and structured documentation including BRDs, FRDs, process flows, and decision matricesSkills5–8+ years of experience as a Business Analyst in the IAM/Security domainStrong experience with PBAC, ABAC, or IAM implementations, including requirement gathering for policy-based access control modelsProficiency in documentation and analysis tools (e.g., Confluence, JIRA, Visio, Lucidchart)Strong understanding of IAM concepts including SSO, Federation (SAML/OIDC), MFA, Directory Services, and access governanceAbility to work effectively with cross-functional teams including security, engineering, product, and complianceExcellent communication and stakeholder management skillsCompany OverviewEPAM leverages its core engineering expertise as a leading global product development and digital platform engineering services company. It was founded in 1993, and is headquartered in Newtown, Pennsylvania, USA, with a workforce of 10001+ employees. Its website is https://www.epam.com.Company H1B SponsorshipEPAM Systems has a track record of offering H1B sponsorships, with 11 in 2026, 120 in 2025, 172 in 2024, 232 in 2023, 373 in 2022, 359 in 2021, 502 in 2020. Please note that this does not guarantee sponsorship for this specific role.