Senior Identity & Access Management Analyst

ZS; Mumbai; Hybrid; INR 1,800,000 - 2,800,000; Full time

Benefits offered by this job

Hybrid working model

Travel opportunities

Job summary

ZS is seeking a Senior Identity & Access Management Analyst in Mumbai to support IAM operations, including lifecycle, access control, PAM, and SSO. You will administer Active Directory and Entra ID, implement MFA and Conditional Access, and collaborate across IT teams.

The role emphasizes automation with PowerShell and Python, documentation, and adherence to change-management processes. A strong English communicator with client-focused mindset is essential.

Qualifications

• Experience administering IAM services including lifecycle, access, PAM and SSO.
• Proficient in Active Directory, Entra ID, MFA, CA, and federation technologies.
• Strong scripting skills in PowerShell and Python for automation.
• Excellent English communication and collaboration with IT teams.

Responsibilities

• Support day-to-day IAM operations: identity lifecycle, access management, PAM, SSO.
• Perform provisioning/deprovisioning and access modifications per IAM policies.
• Maintain PAM integrations and troubleshoot Entra ID/Azure AD related issues.
• Administer and troubleshoot Active Directory and related services (GPO, DNS, replication).
• Support Entra ID/Azure AD, MFA, CA, and enterprise applications.
• Troubleshoot SSO/federation using SAML, OAuth, OIDC.
• Document changes and ensure change-management compliance.
• Automate routine IAM tasks using PowerShell, Python, REST APIs.
• Monitor incidents/requests and ensure SLA adherence.
• Mentor and share knowledge with juniors; grow IAM expertise.

Skills

Entra ID / Azure AD

SAML / SSO

OAuth / OIDC

MFA / Conditional Access

Privileged Access Management

Active Directory

Scripting (PowerShell, Python)

English fluency

Ownership / Problem-solving

Job description

What you'll do: Senior Identity & Access Management Analyst in the Enterprise will…

• Support the day-to-day operations and administration of Identity and Access Management services, including identity lifecycle management, access management, privileged access management, identity federation, and Single Sign-On (SSO).
• Perform user provisioning, deprovisioning, access modifications, authentication and authorization support, ensuring access is managed according to established IAM policies and procedures.
• Maintain and support the integration of Privileged Access Management (PAM) solutions within the enterprise environment.
• Administer and troubleshoot Microsoft Active Directory, including user and group management, Group Policy, DNS, replication, authentication, and related directory services.
• Support Microsoft Entra ID / Azure Active Directory, including identity administration, MFA, Conditional Access, enterprise applications, and authentication-related issues.
• Support and troubleshoot SSO and federation integrations using technologies such as SAML, OAuth, and OIDC.
• Support Active Directory Certificate Services (AD CS) and Active Directory Federation Services (ADFS) operational activities and troubleshooting.
• Work with application, infrastructure, security, and other IT teams to resolve IAM-related incidents and support application integrations.
• Identify opportunities to automate routine IAM and Active Directory activities using PowerShell, Python, REST APIs, and other automation technologies.
• Ensure Active Directory, PAM, Entra ID, and other IAM-related changes are properly documented and follow established change management and approval processes.
• Support IAM-related security remediation activities and help address identified access, authentication, and identity-related risks.
• Maintain operational documentation, standard procedures, troubleshooting guides, and knowledge articles.
• Monitor IAM services and assigned incidents/service requests and ensure activities are completed within established SLAs.
• Share technical knowledge with junior team members and assist them with day-to-day troubleshooting when required.
• Continuously develop technical knowledge across IAM, Active Directory, Entra ID, PAM, SSO, federation, authentication, and related security technologies.

What you’ll bring:

• Microsoft Entra ID / Azure Active Directory
• SAML / SSO
• OAuth / OIDC
• MFA and Conditional Access
• Privileged Access Management
• Microsoft Active Directory (replication, group policy, DNS, computer, user, and group management).
• Ownership: Willingness to dive in to resolve problems not only with owned technology, but other dependent technologies
• Scripting: ability to identify opportunities to automate routine and repetitive tasks and implement automated solutions by way of Powershell and Python.
• Fluency in English
• Client-first mentality
• Intense work ethic
• Collaborative spirit and problem-solving approach

How you’ll grow:

• Cross-functional skills development & custom learning pathways
• Milestone training programs aligned to career progression opportunities
• Internal mobility paths that empower growth via s-curves, individual contribution and role expansions

Perks & Benefits:

At ZS, your growth matters. We offer a comprehensive total rewards package that supports your health and well‑being, financial future, time away, and professional development. With robust skills‑building programs, multiple career progression paths, internal mobility, and a deeply collaborative culture, you’ll have the opportunity to do meaningful work, expand your capabilities, and thrive as part of a global community. For details on total rewards in India, visit ZS India office locations | Where we work | ZS.

Hybrid working model:

We are committed to giving our employees a flexible and connected way of working. A flexible and connected ZS allows us to combine work from home and on-site presence at clients/ZS offices for the majority of our week. The magic of ZS culture and innovation thrives in both planned and spontaneous face‑to‑face connections.

Travel:

Travel is a requirement at ZS for client facing ZSers; business needs of your project and client are the priority. While some projects may be local, all client-facing ZSers should be prepared to travel as needed. Travel provides opportunities to strengthen client relationships, gain diverse experiences, and enhance professional growth by working in different environments and cultures.

Considering applying?

At ZS, we honor the visible and invisible elements of our identities, personal experiences, and belief systems—the ones that comprise us as individuals, shape who we are, and make us unique. We believe your personal interests, identities, and desire to learn are integral to your success here. We are committed to building a team that reflects a broad variety of backgrounds, perspectives, and experiences. Learn more about our inclusion and belonging efforts and the networks ZS supports to assist our ZSers in cultivating community spaces and obtaining the resources they need to thrive.

ZS is an equal opportunity employer and is committed to providing equal employment and advancement opportunities without regard to any class protected by applicable law.