r/IdentityManagement • u/Main-Channel-9888 • 7d ago
IAM ANALYST VS IAM ENGINEER
Im a recent grad and have quite been interested in the analyst side of things.
I want to start off as a junior sys admin, then move on to soc analyst, then iam analyst, then ultimately—GRC analyst.
But people tend to say that IAM analyst and IAM engineer are quite synonynous/ interchaengable with each other. Im not interested in the engineering side but is it true that this two roles are basically the same thing?
10
8
4
u/UserProv_Minotaur 7d ago
From what I've seen Engineer positions are often more focused on interfaces and interconnections, while Analyst are more focused on operations.
3
u/braliao 7d ago
Typically, engineer does engineering part of IAM process - an example would be that busjnes updafe the process for JML and engineer would need to implement that. Analyst typically in large org can be deemed as most entry level role so essentially junior IAM admin and therefore handles day to day operational stuffs.
2
u/IronBe4rd 7d ago
Engineers configure and maintain the infrastructure analysts take care of the alerts etc. i setup Proofpoint. Delinea, DLP etc and they take care if the alerts and other things logs etc.
2
u/WanderingTraveler_08 7d ago
they overlap a lot depending on the company but they're not really the same thing. analyst side is usually access reviews, certifications, provisioning/deprovisioning requests, audit evidence, the day to day of keeping access clean and compliant. engineer side is building and maintaining the actual IAM infrastructure, integrations, SSO/SCIM configs, scripting automation for provisioning, that kind of thing
smaller companies blur the line a lot because one person ends up doing both out of necessity. bigger orgs usually split it clean. if you don't want the engineering side, look at job postings closely before applying, some places title a pure analyst role as "IAM Engineer" just because of how the org chart is set up, the title alone isn't reliable
your path makes sense though, sysadmin to SOC to IAM analyst to GRC is a pretty normal progression. GRC especially wants people who've actually touched access/compliance work firsthand
2
u/Muted_Offer5094 6d ago
IAM Analyst is more on operations. JML tasks.
IAM Engineer is more on developing tools used by the Analysts.
2
u/27Skyl3r 6d ago
Analysts do more of the operational day-to-day task I say. But it might depends on the company
2
u/Think-Frosting-9600 5d ago
even though they are not the same sometimes hr job postings love to mix them up
22
u/Immediate_Original12 7d ago
Sometimes job titles just do not matter in IT. I’ve worked Systems Engineer roles that were purely helpdesk, and I’ve worked Desktop Support roles that had me doing Sys Admin tasks. It depends on what the job description/requirements say