Remoto: Teletrabajo Location: Spain, Porrino; United Kingdom, Manchester; United Kingdom, Slough Lonza is a global leader in life sciences operating across three continents.
While we work in science, there's no magic formula to how we do it.
Our greatest scientific solution is talented people working together, devising ideas that help businesses to help people.
In exchange, we let our people own their careers.
Their ideas, big and small, genuinely improve the world.
And that's the kind of work we want to be part of.
Position: IAM Engineer for Directory Services As the IAM Engineer for directory services at Lonza, you will be responsible for the design, implementation, and management of Active Directory (AD) and Azure Active Directory (Azure AD) across the organization's global infrastructure.
Your role will involve ensuring the security, availability, and scalability of these directory services, which are critical to the company's identity and access management framework.
Key Responsibilities: Design and Implementation of Directory Services: Lead the design, deployment, and management of Active Directory (AD) and Azure Active Directory (Azure AD) environments, ensuring they are secure, scalable, and optimized for performance.
Develop and implement policies for directory services that align with organizational security and compliance requirements, including GDPR and HIPAA.
Collaboration with IAM Teams: Work closely with other IAM teams responsible for Identity Lifecycle, Privileged Access Management, Certificate Services, Application Lifecycle, Authentication, and Authorization to ensure seamless integration and consistent application of security policies across all identity-related areas.
Integration and Automation: Develop and implement automation scripts and tools to streamline directory management tasks, domain provisioning, and standardization in the OU structure and site provisioning & deprovisioning.
Security and Compliance: Implement and maintain strict security standards within directory services, ensuring that only authorized users have access to critical systems and data.
Monitor and audit directory services for compliance with internal and external regulations, identifying and mitigating any security risks.
Directory Services Optimization: Continuously evaluate and optimize the performance of directory services, implementing updates and patches as necessary.
Lead efforts to migrate or upgrade directory services, ensuring minimal disruption to business operations.
Support and Collaboration with Managed Services: Work closely with the IAM Managed Service team, providing them with technical guidance and support for the operational management of AD and Azure AD.
Documentation and Training: Create and maintain comprehensive documentation for directory services architecture, processes, and policies.
Deliver training and knowledge transfer to the IAM Managed Service team and other relevant collaborators.
Key Requirements: Technical Expertise in Directory Services: Extensive hands-on experience with Active Directory (AD) and Azure Active Directory (Azure AD) administration, including designing, deploying, and managing these environments in large-scale, global organizations.
IAM Knowledge: Solid grasp of Identity and Access Management concepts, particularly in relation to directory services, authentication, authorization, and identity lifecycle management.
Security and Compliance Competence: In-depth knowledge of security standard processes related to directory services, including access controls, password policies, and audit logging.
Scripting and Automation Skills: Proficiency in scripting languages such as PowerShell, Python, or similar, to automate directory management tasks and integrate with other IAM tools.
Problem-Solving: Strong analytical skills with the ability to diagnose and resolve complex issues related to directory services.
Collaboration and Communication: Ability to collaborate effectively with multi-functional teams, including cybersecurity, IT operations, and business units, to achieve shared goals.
Continuous Learning and Adaptability: Commitment to staying ahead of the latest developments in directory services, IAM technologies, and security practices.
This role can be done as remote work with residency in Spain, UK, and Netherlands.
Every day, Lonza's products and services have a positive impact on millions of people.
For us, this is not only a great privilege but also a great responsibility.
How we achieve our business results is just as important as the achievements themselves.
Reference: R62558 #J-18808-Ljbffr