Lead Analyst - Identity and Access Management

Lead Analyst - Identity and Access Management 

The Big Picture 

Sysco LABS is the Global In-House Center of Sysco Corporation (NYSE: SYY), the world’s largest foodservice company. Sysco ranks 56th in the Fortune 500 list and is the global leader in the trillion-dollar foodservice industry.   

Sysco employs over 75,000 associates, has 337 smart distribution facilities worldwide and over 14,000 IoT-enabled trucks serving 730,000 customer locations. For fiscal year 2025 that ended June 29, 2025, the company generated sales of more than $81.4 billion.   

Sysco LABS Sri Lanka delivers the technology that powers Sysco’s end-to-end operations.     

Sysco LABS’ enterprise technology is present in the end-to-end foodservice journey, enabling the sourcing of food products, merchandising, storage and warehouse operations, order placement and pricing algorithms, the delivery of food and supplies to Sysco’s global network and the in-restaurant dining experience of the end-customer. 

The Opportunity 

​​​​The Lead Analyst - Identity and Access Management is responsible for providing advanced operational and analytical support for Sysco’s enterprise identity and access management ecosystem. This role will be responsible for escalated support, process improvement, and ensuring alignment to Sysco’s cybersecurity standards and best practices This role supports enterprise Identity & Access Management initiatives with a strong focus on user access operations, identity protection, and compliance monitoring.   

This Lead Analyst will partner closely with engineering and architecture teams to maintain Sysco’s global identity systems, resolve complex access issues, and provide advanced operational support for Microsoft Entra and integrated IAM platforms. The position collaborates with enterprise architecture, cybersecurity, and business teams to deliver scalable, secure, and user-friendly solutions while mentoring junior team members. This role may occasionally require working outside regular shift hours to support critical incidents, escalations, or global coverage needs.​ This is an ​​individual contributor​ role. 

​​This is a hybrid remote and office-based role in Sri Lanka, aligning with the local job requirement guidelines (primary shift: [7:30 PM - 3:30 AM SLST, 9:00 AM - 5:00 PM CDT] with flexibility). Most work is performed Monday through Friday virtually using collaboration tools and video conferencing. Our team has occasional on-call support. You’ll be part of a high-performing, security-driven team that values innovation, delivery excellence, and continuous learning. 

Responsibilities: 

• ​​Operations and Escalated Support: Resolving escalated incidents and service requests related to identity provisioning, access management and authentication issues 

• ​​Performing advanced troubleshooting of Entra ID, MFA, Conditional Access, SSPR and legacy authentication issues 

• ​​Governance and Compliance: Supporting access certifications, audit requests, and compliance reporting 

• ​​Ensuring IAM operations align with Sysco’s IAM policies and enterprise standards 

• ​​Process Improvement and Automation: Recommending and implementing enhancements for IAM operational processes 

• ​​Assisting in developing automation scripts (PowerShell, Graph API) to improve efficiency 

• ​​Collaboration and Stakeholder Engagement: Partnering with engineering teams on IAM projects and escalations; Working with business units and application owners to validate access and resolve identity issues 

• ​​Providing guidance to IAM Analysts I and II, sharing best practices and troubleshooting knowledge 

Requirements:  

• A Bachelor's Degree in Computer Science, Information Systems, or related field; or equivalent practical experience​ 

• ​​Advanced degree or IAM-related certifications 

• 3–5 years of experience in Identity & Access Management (IAM), IT security, or related disciplines 

• ​Hands-on experience with Microsoft Entra ID (Azure AD), MFA, and conditional access 

• ​Strong troubleshooting skills in hybrid identity environments 

• ​Familiarity with authentication protocols (SAML, OIDC, Kerberos)   

• ​Excellent oral and written communication skills with ability to engage stakeholders across the enterprise 

• ​​Experience with Okta, Silverfort, YubiKey, or Microsoft Identity Validation (IDV)  

• ​Exposure to M&A onboarding or directory migrations 

• ​Prior experience in large enterprise environments (100k+ users) 

• Relevant certifications such as Microsoft SC-900, SC-300 

• ​​Excellent troubleshooting and problem-solving skills in enterprise-scale identity environments 

• ​Familiarity with Endpoint Management (Intune, Workspace ONE)​ 

Benefits: 

• US dollar-linked compensation 

• Performance-based annual bonus 

• Performance rewards and recognition 

• Agile Benefits - special allowances for Health, Wellness & Academic purposes 

• Entertainment allowance 

• Team engagement allowance 

• Comprehensive Health & Life Insurance Cover - extendable to parents and in-laws 

• Overseas travel opportunities and exposure to client environments 

• Hybrid work arrangement 

Sysco LABS is an Equal Opportunity Employer.