Job Description

MKS Instruments recently began its journey of building an enterprise-class Identity and Access Management program. As part of that continuous effort, MKS Instruments has identified the need for an Identity and Access Management

(IAM) Saviynt Analyst.

Providing enterprise-class Identity and Access Management controls requires technology and design, implementation, and oversight of secure processes for managing identities (such as User Lifecycle Management and Privileged Access Management). The Senior IAM Access Assurance Analyst is responsible for supporting the IAM Program and Leader in the planning, strategy, development, implementation, operations, and support for these processes to secure the company's digital identity and access for all enterprise workforce members.


Primary responsibilities will include the development and implementation of a multi-year roadmap for these processes and controls, continual improving IAM practices, and participating in activities to identify revisions, including internal measurement practices, security practice reviews, and internal/external audits, and supporting current and future growth of our tools related to Identity and Access Management.


The successful candidate will be a highly analytical, passionate, and self-driven individual who loves to learn, solve problems, and contribute to the team's advancement.

Responsibilities:

Assist in the development, implementation, and execution of access management processes, specifically User Lifecycle Management and Privileged Access Management for Advisor Group's core systems and applications Work across the organization to identify outstanding issues and gaps in compliance adherence to these processes and collaborate with those organizations on remediation's of both the acute problems and systemic access control security gaps Provide routine management reporting on identified access management control failures and remediation steps Create and maintain standards surrounding documentation related to identity processes, procedure and infrastructure. Assess current applications and architecture to ensure current implementations align with industry guidelines, best practices and company approved standards. Document the procedures and run books required to perform the duties of this position Design security processes and procedures in alignment with the organization's policies and security standards, regulatory requirements, and best practices as noted based on industry standards Provide technical expertise in thread/risk assessments related to privileged access Work with vendors and co-sourcing partners to successfully resolve problems and implement projects as required Implement major version upgrades and Create or modify existing policies in PAM solution based on new requests Perform other security-related duties as requested Activities of the IAM Admin plus reporting, analysis and managing the IAM Saviynt Support team. Recognizing issues from the ServiceDesk tickets and performance improvements. Assisting the IAM manager/Product Owner for the future IAM enhancements to build the IAM Product Roadmap. Administrators who know the application and how to troubleshoot Operating Platform and changes Performing Root Cause Analysis documentation for the Severity issues. Knowledge on IAM Automation and Orchestration. Technical expertise for the app. Help drive technical direction for Saviynt Integrated developer background Adhere to Service Level SLAs related to IAM Operations based on ticket priority.

Education & Experience Requirements:

Bachelor's Degree Preferred, H.S. Diploma or GED certificate + Significant Practical Experience will be considered

Mandatory Requirements:

5 - 7 years of experience in identity & access management-relate role 4 - 5 years of experience in Saviynt Preferred Saviynt IGA Certified Required Completion of Saviynt L100 and L200 training. Understand industry best practices for access administration activities (i.e., provisioning, de-provisioning, access reviews, automation, role-based access control, privileged access, data classification and recertification, etc.), authorization and authentication protocols, and access governance Experience working with IAG Experience working in a highly regulated (i.e., Sarbanes-Oxley) and other regulatory environments Experience working with Identity Governance and IAM ecosystems, such as Saviynt, SAP, Workday, Active Directory, Azure Active Directory, and Database applications (Oracle, SQL) Experience designing process flows to be implemented in security automation tools Strong analytical skills, problem-solving, and critical thinking. Ability to lead a project while accounting for the strategic direction Ability to research, analyze, and resolve complex problems with minimal supervision and escalate issues as appropriate Demonstrated understanding of risk and compliance frameworks Excellent documentation, written and communication skills Must be a detail-oriented, well-organized, self-starter able to work in a dynamic environment with the ability to perform multiple tasks Highly motivated individual with the ability to self-start, prioritize, and multi-task

Preferred Requirements:

Scripting and/or programming skills in technologies, such as PowerShell, SQL, Python, and JSON Strong interpersonal and communication skills and the ability to collaborate and work effectively with a wide range of cross-functional teams, vendors, and time zones. Experience with REST/SOAP protocols Familiarity with standards for SSO technologies such as SAML2, OAuth2 Must be a team player + Demonstrated ability to learn new IT and security concepts and technologies quickly

#LI-MK1


Globally, our policy is to recruit individuals from wide and diverse backgrounds. However, certain positions require access to controlled goods and technologies subject to various export control regulations. Applicants for these positions may be limited (by, for example, their countries of citizenship, country of origin, or immigration status) where required by law or governmental contact, and/or employment made contingent upon the issuance of appropriate governmental licensing.


MKS Inc. and its affiliates and subsidiaries ("MKS") is an affirmative action and equal opportunity employer: diverse candidates are encouraged to apply. We win as a team and are committed to recruiting and hiring qualified applicants regardless of race, color, national origin, sex (including pregnancy and pregnancy-related conditions), religion, age, ancestry, physical or mental disability or handicap, marital status, membership in the uniformed services, veteran status, sexual orientation, gender identity or expression, genetic information, or any other category protected by applicable law. Hiring decisions are based on merit, qualifications and business needs. We conduct background checks and drug screens, in accordance with applicable law and company policies. MKS is generally only hiring candidates who reside in states where we are registered to do business.


MKS is committed to working with and providing reasonable accommodations to qualified individuals with disabilities. If you need a reasonable accommodation during the application or interview process due to a disability, please contact us at: accommodationsatMKS@mksinst.com .


If applying for a specific job, please include the requisition number (ex: RXXXX), the title and location of the role