The Role
This is a part-time Identity and Access Management Analyst position based at an on-site office in Cyber City, DLF Phase 2, Gurugram, with pay running up to ₹39,500 a month. The role sits inside the cybersecurity function and works closely with the broader security operations team, which is ultimately responsible for controlling who has access to which systems and data across the company.
Access sprawl is one of the quieter risks in most mid-sized organizations. Accounts get created for a project and never cleaned up, permissions get copied from one employee to another without anyone checking whether they still make sense, and by the time an audit happens, there's a long list of access grants nobody can fully explain. This role keeps that list short.
The position reports into a small security operations group rather than a large IT department, so the analyst hired for this role ends up owning a fair amount of the identity workflow directly. Requests don't sit in a long approval chain before reaching someone who can act on them.
What you'll do
The daily work centers on keeping access accurate rather than reactive.
- Provision and deprovision user accounts across directory services as employees join, move between teams, or leave the organization
- Maintain and update access control policies so that permissions stay aligned with current job roles rather than historical ones
- Run periodic access reviews, and flag accounts carrying more privilege than the role actually requires
- Support incident response when a compromised account or an unauthorized access attempt is identified
- Assist with vulnerability assessments tied to identity systems and recommend fixes where existing controls fall short
- Document access decisions clearly enough that a future audit doesn't require reconstructing the reasoning from scratch
- Coordinate with IT and HR during onboarding and offboarding cycles so account changes track actual headcount changes on record
Because the schedule is part-time and the position is on-site, most of this work happens during a fixed block of hours in the office. There isn't an on-call rotation attached, though urgent access issues that come up during working hours take priority over routine reviews.
What you'll need
A bachelor's degree in cybersecurity, information technology, or a closely related field is the baseline expectation for anyone applying. Alongside that, the hiring team is asking for 42 months of hands-on experience with identity systems or a comparable security role.
- Working knowledge of IAM tools such as Active Directory, Okta, or a similar identity platform
- Practical experience writing, applying, or enforcing access control policies
- Familiarity with directory services administration, including group structures and permission inheritance
- A solid grounding in general security basics, covering authentication protocols and least-privilege principles
You don't need to master any of these skills before day one. A candidate who is strong across most of the list and genuinely willing to build the rest on the job is still worth an application. The 42 months of experience matters more as a rough marker of comfort with the work than as a strict cutoff; someone slightly under that number with strong directory services chops has a reasonable shot.
Nice to have
A few additional skills aren't required but will make a resume stand out among the other applicants.
- Exposure to SailPoint, Azure Entra ID, or another enterprise identity governance platform
- A CompTIA Security+ certification, or something equivalent
- Basic scripting ability in PowerShell or Python for automating routine access tasks like bulk deprovisioning
- Prior experience in a regulated industry where access audits happen on a fixed schedule rather than only after an incident
These extras aren't weighted against each other in any strict order. A candidate who scripts well but has never touched a governance platform is in roughly the same position as one with the opposite mix, so mention whichever applies rather than assuming the list needs to be checked off in full.
Where you'll work
The office sits in Cyber City, DLF Phase 2, one of Gurugram's denser commercial pockets, within reach of the Rapid Metro and several bus routes for anyone commuting in from elsewhere in the NCR. Naukri Mitra lists this opening as part-time and on-site, a combination that suits people balancing a second commitment, whether that's a course, a caregiving responsibility, or another job. The security team itself is small, which means an analyst's individual calls on a flagged account carry real weight rather than getting buried under several layers of sign-off.
The pace is generally steady rather than reactive. Spikes happen around onboarding cycles and scheduled audit windows, when the volume of access requests and reviews climbs for a week or two, but the role doesn't involve the overnight firefighting some security jobs do. A new analyst usually spends the first month shadowing existing reviews before being handed a full queue independently, and questions during that stretch go to a senior analyst rather than being left to guesswork.
Benefits
- Pro-rated paid leave, calculated against part-time hours rather than a full-time baseline
- Flexible scheduling within the on-site working window, useful for anyone juggling classes or a second commitment
- Performance-based incentives tied to review completion rates and audit outcomes
- On-site cafeteria access
- Cab or commute support for eligible shifts, which matters given the Cyber City traffic at peak hours
These are additions on top of the monthly salary rather than a substitute, and most kick in after a short initial period rather than from the first day on the job.
Applying
Pay for this role runs up to ₹39,500 per month, which sits within the usual identity and access management analyst salary range for part-time work in Gurugram. Applications go through this listing directly. Interviews are typically scheduled within a week, and the hiring manager reviews resumes on a rolling basis rather than waiting for a fixed cutoff date, so there's no advantage to waiting to apply once the role looks like a fit. Candidates should be ready to talk through a specific access review or provisioning decision they've handled before, since that conversation tends to matter more in the interview than a list of tools on a resume.
