Lead Business Analyst

Title: Lead Business System Analyst Location: Lowell or Weston UKG Office (Hybrid Tue, Wed, Thu from office) Shift: Monday – Friday 8:00 AM – 5:00 PM EST (1 hr lunch) Hours: 40 Hours a week. No overtime or weekend support expected. Duration: 6 months initial contract. This is a contract-to-hire opportunity. Description The D365 Technical Security Architect plays a critical role in designing, implementing, and governing security models across Microsoft Dynamics 365 Finance & Operations (D365 F&O). This position partners closely with business stakeholders, functional leads, and technical teams to ensure that user access is aligned with business processes, compliant with internal controls, and optimized for operational efficiency. The ideal candidate brings deep expertise in D365 security architecture, role-based access control (RBAC), Segregation of Duties (SoD), and security governance tools such as Fastpath. Key Responsibilities • Requirements Gathering & AnalysisConduct structured requirements elicitation sessions with business users across Finance, Supply Chain, and Operations to understand access needs and process flows. • Analyze functional processes in AR, AP, GL, and SCM to determine appropriate security design and persona-based access models. • Translate business requirements into clear, actionable user stories and acceptance criteria within Azure DevOps. • Security Design & ArchitectureDesign and maintain the D365 security model, including roles, duties, privileges, and permission sets aligned to business personas. • Architect scalable and compliant Role based access control structures that support least-privilege access and internal control frameworks. • Evaluate existing security configurations and recommend improvements to enhance compliance, performance, and usability. • Configuration & ImplementationBuild, configure, and deploy security roles, duties, and privileges within D365 F&O. • Configure and maintain security settings in Fastpath, including SoD rule sets, monitoring, and remediation workflows. • Run Segregation of Duties analyses and collaborate with business and audit teams to mitigate conflicts through design adjustments or compensating controls. • Testing, Validation & TroubleshootingDevelop and execute test plans for security changes, including unit testing, integration testing, and user acceptance testing. • Troubleshoot and resolve defects related to user access, security roles, and permission conflicts. • Support go-live activities and post-deployment stabilization for security-related components. • Governance & Continuous ImprovementMaintain documentation for security design, role definitions, and access governance processes. • Provide guidance and training to functional teams on security best practices and role management. • Monitor system updates and releases to assess impact on security configurations and ensure ongoing compliance. Required Skills & Experience • Strong hands-on experience with D365 Finance & Operations security architecture. • Proven ability to design and implement roles, duties, and privileges for complex business environments. • Experience writing user stories, acceptance criteria, and managing work items in Azure DevOps. • Proficiency with Fastpath or similar access governance tools. • Solid understanding of Segregation of Duties principles and risk mitigation strategies. • Ability to analyze business processes across Finance and Supply Chain to determine appropriate access models. • Strong troubleshooting skills related to user access and security configuration defects. • Excellent communication skills and the ability to collaborate with both technical and non-technical stakeholders. Preferred Qualifications: • Experience supporting large-scale D365 implementations or transformations. • Familiarity with audit requirements, internal controls, and compliance frameworks (SOX, ITGC, etc.). • Knowledge of Power Platform security, Azure AD, and broader Microsoft ecosystem integrations. • Certifications such as Microsoft Dynamics 365 Finance Functional Consultant, Security Administrator Associate, or equivalent.