Privileged Access Platform Owner - L2

About this role

Not quite right? These jobs in Gurugram match the same skills — apply to a few to improve your chances.

Internal Audit Manager – IT Risk & CASS

FNZ

In OfficeGurugram

Apply

CyberArk Engineer – PAM, Vault, PVWA, CPM, PSM & PowerShell

Synechron

In OfficeGurugram

Apply

Firewall Management - Consultant

KPMG Global Services

In OfficeGurugram

Apply

Platinum Banker-Household-Outbound-Branch Banking-Relationship Management

Kotak Mahindra Bank

In OfficeGurugram

Apply

Skills you'll use

What you'll do

• Platform Ownership & Strategy- Act as product owner for Evidian (Authentication Manager / Enterprise SSO), Admin By Request, and 1Password—owning roadmaps, backlog, release planning, and stakeholder communication. Define architecture and configuration baselines aligned to zero trust, least privilege, and separation of duties, while maintaining platform governance across access models, workflows, policies, standards, and lifecycle management.
• Engineering & Integration- Design and implement integrations with enterprise directories (e.g., Azure AD/Entra ID, AD), HRIS (for joinermoverleaver), MDM/UEM (e.g., Intune), SIEM/SOAR, ticketing (ServiceNow/Jira), and secrets pipelines (CI/CD).
• Security & Compliance-Implement least‑privilege controls with Admin By Request (approval policies, just‑in‑time elevation, allow/deny lists, session auditing) and operate 1Password enterprise policies (domain capture, vault hygiene, phishing‑resistant MFA, secrets access controls, recovery processes).
• Operations & Service Management -Own SLAs/OLAs, incident/problem/change management, patching, upgrades, and vendor management. Provide L3 support and enable L1/L2 teams through documentation and training.

Who can apply

• 5+ years in IAM/Security Engineering or Endpoint Security, with 2+ years administering at least two of the following: Evidian (Authentication Manager / Enterprise SSO), Admin By Request (or equivalent PAM/JIT elevation), 1Password (or enterprise password/secrets managers).
• Strong experience with Entra ID/Azure AD & Active Directory, SSO (SAML/OIDC), and SCIM provisioning.
• Scripting/automation proficiency: PowerShell
• Hands-on with SIEM (e.g., Sentinel, Splunk, Chronicle) for log forwarding, correlation, and alerting.
• Solid understanding of least privilege, JIT/JEA, secrets management, and credential hygiene with Familiarity on data protection principles.

About MKS Instruments

Searching for “MKS Instruments jobs” or “jobs at MKS Instruments”? You’re in the right place.