Position Summary

We are seeking a motivated and analytical Business Systems Analyst II (BSA2) with 3-4 years of experience in Identity and Access Management (IAM) and Authorization to support Deloitte's GlobalAdvantage IAM and access enforcement initiatives. The successful candidate will work closely with Product Owners, Security Architects, Engineers, and business stakeholders to define, document, and deliver secure authorization and access management capabilities across GlobalAdvantage applications and services.

The ideal candidate will have a robust understanding of authorization concepts, including Policy-Based Access Control (PBAC), Role-Based Access Control (RBAC), and modern entitlement models. Experience translating business requirements into authorization policies, access rules, workflows, and user stories is highly desirable. Exposure to Identity Governance processes and platforms is beneficial but not the primary focus of this role.

Candidates with hands-on technical skills in scripting, APIs, or application development will be preferred, as the role often requires defining Authorization policies as code, collaboration with engineering teams and validation of technical solutions.

Key Job Responsibilities:

- Partner with Product Owners, Security Architects, Engineers, and business stakeholders to gather, analyze, and document business requirements related to authorization, access management, and identity services.
- Support the definition and implementation of Policy-Based Access Control (PBAC), Attribute-Based Access Control (ABAC), and entitlement management capabilities across enterprise applications.
- Translate business policies, compliance requirements, and access rules into detailed functional requirements, user stories, acceptance criteria, and process flows.
- Assist in the analysis and design of authorization models, roles, permissions, policy structures, and entitlement hierarchies.
- Work with engineering teams to define policy evaluation requirements, authorization decision flows, and integration patterns for access management solutions.
- Facilitate stakeholder discussions, workshops, and requirement-gathering sessions to understand access control and authorization needs.
- Support backlog management activities, including story refinement, requirements clarification, and testing support within Azure DevOps (ADO), Jira, or similar platforms.
- Participate in solution testing, user acceptance testing (UAT), and validation activities to ensure implemented authorization capabilities meet business and security requirements.
- Analyze existing access models and business processes to identify opportunities to improve usability, security, scalability, and operational efficiency.
- Support API, application, and identity integration efforts by documenting requirements, data flows, access models, and business rules.
- Contribute to process documentation, policy catalogs, entitlement inventories, business workflows,



and stakeholder-facing materials.
- Collaborate with governance, risk, compliance, and security teams to ensure access control solutions align with enterprise standards and security objectives.
- Support Identity Governance processes, including access reviews, provisioning workflows, and entitlement management, as needed.
- Strong analytical and problem-solving skills.
- Ability to learn quickly and work effectively in a fast-paced environment.
- Excellent verbal and written communication skills.
- Detail-oriented with a structured approach to requirements analysis.
- Comfortable working with both technical and non-technical stakeholders.
- Curious and eager to understand security, access management, and emerging authorization technologies.
- Able to navigate ambiguity and drive requirements toward actionable outcomes.
- Team-oriented with a collaborative mindset.

Shift Timings: 11:00 AM to 8:00 PM

Location: Hyderabad

Qualifications:

- B.E / B.Tech
- Relevant IGA, IAM or AWS Security Certifications

Key skills required

- 3-4 years of experience as a Business Analyst, Systems Analyst, Product Analyst, or similar role.
- Strong understanding of authorization concepts including:
- Policy-Based Access Control (PBAC)
- Attribute-Based Access Control (ABAC)
- Role-Based Access Control (RBAC)
- Entitlement Management

- Experience gathering business requirements and translating them into user stories, functional specifications, acceptance criteria, and process flows.
- Familiarity with authorization models, access policies, permissions, and security controls within enterprise applications.
- Experience working with Agile delivery teams and managing requirements through Azure DevOps, Jira, or similar tools.
- Understanding of authentication and access management concepts including SSO, MFA, identity federation, and authorization services.
- Familiarity with APIs, REST services, and application integration patterns.
- Strong documentation and process modeling skills using Visio, Lucidchart, or similar tools.
- Experience supporting testing, validation, and defect triage activities.
- Experience supporting or implementing PBAC solutions and policy-driven authorization models.
- Exposure to policy-as-code frameworks such as Cedar, Open Policy Agent (OPA), or Rego.
- Exposure to Agentic AI software development, including AI agents, agent frameworks, MCP/API integrations, prompt orchestration, and implementation of authorization, identity, and policy controls (PBAC/ABAC) within agent-driven workflows.




- Hands-on experience with scripting or programming languages such as Python, JavaScript, TypeScript, PowerShell, or Java.
- Ability to read, understand, and troubleshoot application code, APIs, authorization policies, and technical documentation.
- Familiarity with Identity Governance platforms such as SailPoint, Saviynt, or custom governance solutions.
- Experience supporting access reviews, access requests, and entitlement lifecycle processes.
- Experience working with security, compliance, audit, or risk management teams.
- Knowledge of modern authorization architectures and distributed application security patterns.

Our purpose Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities. Our people and culture

Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas and perspectives, and bring more creativity and innovation to help solve our clients’ most complex challenges. This makes Deloitte one of the most rewarding places to work. Professional development

At Deloitte, professionals have the prospect to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India. Benefits to help you thrive

At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially—and live their purpose. To support our professionals and their loved ones, we offer a broad range of benefits.

Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you. Recruiting tips

From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters. Requisition code: 371234

Business Systems Analyst – Identity & Access Management (IAM) / Authorization – Global Employer Services Technology Center

Hyderabad, Telangana, India

📌 Business Systems Analyst – Identity & Access Management (IAM) / Authorization – Global Employer Services Technology Center (Hyderabad)
🏢 Deloitte
📍 Hyderabad