Senior Identity & Access Management Analyst

ZS is a place where passion changes lives. As a management consulting and technology firm focused on improving life and how we live it, we transform ideas into impact by bringing together data, science, technology and human ingenuity to deliver better outcomes for all. Here you'll work side-by-side with a powerful collective of thinkers and experts shaping life-changing solutions for patients, caregivers and consumers, worldwide. ZSers drive impact by bringing a client-first mentality to each and every engagement. We partner collaboratively with our clients to develop custom solutions and technology products that create value and deliver company results across critical areas of their business. Bring your curiosity for learning, bold ideas, courage and passion to drive life-changing impact to ZS.

What you'll do: Senior Identity & Access Management Analyst in the Enterprise will…

• Support the day-to-day operations and administration of Identity and Access Management services, including identity lifecycle management, access management, privileged access management, identity federation, and Single Sign-On (SSO).
• Perform user provisioning, deprovisioning, access modifications, authentication and authorization support, ensuring access is managed according to established IAM policies and procedures.
• Maintain and support the integration of Privileged Access Management (PAM) solutions within the enterprise environment.
• Administer and troubleshoot Microsoft Active Directory, including user and group management, Group Policy, DNS, replication, authentication, and related directory services.
• Support Microsoft Entra ID / Azure Active Directory, including identity administration, MFA, Conditional Access, enterprise applications, and authentication-related issues.
• Support and troubleshoot SSO and federation integrations using technologies such as SAML, OAuth, and OIDC.
• Support Active Directory Certificate Services (AD CS) and Active Directory Federation Services (ADFS) operational activities and troubleshooting.
• Work with application, infrastructure, security, and other IT teams to resolve IAM-related incidents and support application integrations.
• Identify opportunities to automate routine IAM and Active Directory activities using PowerShell, Python, REST APIs, and other automation technologies.
• Ensure Active Directory, PAM, Entra ID, and other IAM-related changes are properly documented and follow established change management and approval processes.
• Support IAM-related security remediation activities and help address identified access, authentication, and identity-related risks.
• Maintain operational documentation, standard procedures, troubleshooting guides, and knowledge articles.
• Monitor IAM services and assigned incidents/service requests and ensure activities are completed within established SLAs.
• Share technical knowledge with junior team members and assist them with day-to-day troubleshooting when required.
• Continuously develop technical knowledge across IAM, Active Directory, Entra ID, PAM, SSO, federation, authentication, and related security technologies.

What you'll bring:

• Microsoft Entra ID / Azure Active Directory
• SAML / SSO
• OAuth / OIDC
• MFA and Conditional Access
• Privileged Access Management
• Microsoft Active Directory (replication, group policy, DNS, computer, user, and group management.

• Ownership: Willingness to dive in to resolve problems not only with owned technology, but other dependent technologies

• Scripting: ability to identify opportunities to automate routine and repetitive tasks and implement automated solutions by way of Powershell and Python.

• Fluency in English

• Client-first mentality
• Intense work ethic
• Collaborative spirit and problem-solving approach

How you'll grow:

• Cross-functional skills development & custom learning pathways
• Milestone training programs aligned to career progression opportunities
• Internal mobility paths that empower growth via s-curves, individual contribution and role expansions

Perks & Benefits:

At ZS, your growth matters. We offer a comprehensive total rewards package that supports your health and well‑being, financial future, time away, and professional development. With robust skills‑building programs, multiple career progression paths, internal mobility, and a deeply collaborative culture, you'll have the opportunity to do meaningful work, expand your capabilities, and thrive as part of a global community. For details on total rewards in , visit .

Hybrid working model:

We are committed to giving our employees a flexible and connected way of working. A flexible and connected ZS allows us to combine work from home and on-site presence at clients/ZS offices for the majority of our week. The magic of ZS culture and innovation thrives in both planned and spontaneous face-to-face connections.

Travel:

Travel is a requirement at ZS for client facing ZSers business needs of your project and client are the priority. While some projects may be local, all client-facing ZSers should be prepared to travel as needed. Travel provides opportunities to strengthen client relationships, gain diverse experiences, and enhance professional growth by working in different environments and cultures.

Considering applying

At ZS, we honor the visible and invisible elements of our identities, personal experiences, and belief systems-the ones that comprise us as individuals, shape who we are, and make us unique. We believe your personal interests, identities, and desire to learn are integral to your success here. We are committed to building a team that reflects a broad variety of backgrounds, perspectives, and experiences. about our inclusion and belonging efforts and the networks ZS supports to assist our ZSers in cultivating community spaces and obtaining the resources they need to thrive.

If you're eager to grow, contribute, and bring your unique self to our work, we encourage you to apply.

ZS is an equal opportunity employer and is committed to providing equal employment and advancement opportunities without regard to any class protected by applicable law.

To complete your application:
Candidates must possess or be able to obtain work authorization for their intended country of employment. An on-line application, including a full set of transcripts (official or unofficial), is required to be considered.

NO AGENCY CALLS, PLEASE.

Find Out More At: