Active Directory Business Analyst Jobs (NOW HIRING)

The Business Analyst - Active Directory & PowerShell serves as a liaison between business stakeholders, Information Security, IAM engineering, application owners, and IT support teams.

This role analyzes identity and access management processes, with a strong focus on Microsoft Active Directory, group and access analysis, role-based access concepts, and user lifecycle controls. The position combines business analysis responsibilities with hands-on technical analysis using PowerShell, Active Directory reporting tools, and structured data.

The analyst will identify access patterns, conduct stakeholder interviews, document business and application context, and make recommendations for group cleanup, entitlement rationalization, and access-package development.

This is primarily an analysis and recommendation role. Implementation and remediation activities will be performed by the appropriate technical and operational teams.

Business and Process Analysis

• Partner with IAM, Information Security, Infrastructure, application owners, IT support teams, and business stakeholders to understand Active Directory groups and access requirements.
• Conduct stakeholder interviews and working sessions to document how access is used across applications, teams, and business functions.
• Translate technical analysis into clear recommendations for both technical and nontechnical stakeholders.

• Extract and analyze Active Directory users, groups, memberships, nested groups, attributes, ownership, and access relationships.
• Identify group relationships and access patterns that can support role-based access and access-package design.
• Identify and recommend remediation for stale, duplicate, unmanaged, poorly owned, or inconsistently assigned groups.

• Use PowerShell to extract and analyze Active Directory users, groups, memberships, ownership, and attributes.
• Use Excel, Python, or similar tools to clean, compare, reconcile, and report on identity data.

#LI-NB2

Demonstrated experience analyzing Microsoft Active Directory users, groups, memberships, nested groups, attributes, organizational units, ownership, and account status.

Hands-on experience writing and executing PowerShell scripts for Active Directory analysis and reporting.

Strong analytical skills with the ability to identify trends and relationships within large and complex datasets.

Strong communication skills and the ability to present technical findings to business and technical stakeholders.

Experience using Microsoft Excel for data comparison, lookup functions, formulas, pivot tables, and reporting.

Experience gathering business and technical context through stakeholder interviews and working sessions.

Preferred Qualifications

Experience with IAM, identity governance, role-based access control, access-package design, or entitlement rationalization.

Experience supporting Active Directory cleanup, group analysis, role mining, or access-review initiatives.

Experience using PowerShell for data analysis, reconciliation, automation, or reporting.

Experience with ServiceNow request, incident, change, or identity-related workflows.

Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.
At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact
Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).
This posting is open for thirty (30) days.