AD/Azure/EO Ops L2 bei Mksinst

A Day in Your Life at MKS:
We are seeking an experienced AD/AZURE/EO (Azure ACTIVE Directory) to manage and secure our enterprise identity platform. The ideal candidate will have in-depth expertise in Microsoft Entra ID (Azure AD), identity lifecycle management, and cloud security best practices.

You Will Make an Impact By:

• Manage Entra Application Lifecycle and administer Azure Active Directory (Azure AD) services, including identity management, authentication, and access control.
• Implement and maintain Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Conditional Access policies.
• Monitor, troubleshoot, and resolve Azure AD-related issues, ensuring high availability and optimal performance.
• Configure and manage Hybrid Identity solutions, including Azure AD Connect, and synchronization between on-premises AD and Azure AD.
• Enforce Identity and Access Management (IAM) policies, security controls, and compliance frameworks in alignment with industry standards.
• Work with Microsoft Entra ID, Role-Based Access Control (RBAC), and Privileged Identity Management (PIM) for secure access governance.
• Perform user provisioning, de-provisioning, and role assignments across enterprise applications.
• Stay current with Microsoft identity solutions, Azure security updates, and best practices for cloud identity management.

Skills You Bring:

• 3+years’ of relevant experience and Proven experience managing Azure Active Directory in an enterprise environment.
• Strong understanding of identity federation, authentication protocols (SAML, OAuth, OpenID Connect), and hybrid identity solutions.
• Hands-on experience with MFA, Conditional Access, and SSO configurations.
• Proficiency with Azure AD Connect, AD FS, and PIM.
• Strong knowledge of IAM security principles and compliance requirements (ISO, GDPR, NIST, etc.).
• Excellent problem-solving, troubleshooting, and documentation skills.
• Microsoft certification in Identity & Access or Azure Administrator (e.g., SC-300, AZ-104) is preferred.

Preferred Skills: (Optional)

• Experience with PowerShell scripting for automation of Azure AD tasks.
• Familiarity with Microsoft 365 integration with Azure AD.
• Understanding of Zero Trust security models.


Benefits
• Competitive salary and performance bonuses
• Health insurance and wellness programs
• Paid time off and flexible work arrangements
• Opportunities for professional training and certifications

#LI-MK1

Globally, our policy is to recruit individuals from wide and diverse backgrounds. However, certain positions require access to controlled goods and technologies subject to various export control regulations.  Applicants for these positions may be limited (by, for example, their countries of citizenship, country of origin, or immigration status) where required by law or governmental contact, and/or employment made contingent upon the issuance of appropriate governmental licensing.

MKS Inc. and its affiliates and subsidiaries (“MKS”) is an affirmative action and equal opportunity employer: diverse candidates are encouraged to apply. We win as a team and are committed to recruiting and hiring qualified applicants regardless of race, color, national origin, sex (including pregnancy and pregnancy-related conditions), religion, age, ancestry, physical or mental disability or handicap, marital status, membership in the uniformed services, veteran status, sexual orientation, gender identity or expression, genetic information, or any other category protected by applicable law. Hiring decisions are based on merit, qualifications and business needs. We conduct background checks and drug screens, in accordance with applicable law and company policies.  MKS is generally only hiring candidates who reside in states where we are registered to do business.

MKS is committed to working with and providing reasonable accommodations to qualified individuals with disabilities. If you need a reasonable accommodation during the application or interview process due to a disability, please contact us at: [email protected] .

If applying for a specific job, please include the requisition number (ex: RXXXX), the title and location of the role