.Job Description Summary#Sandoz Job DescriptionSandoz is going through an exciting and transformative period as a global leader and pioneering provider of sustainable Biosimilar and Generic medicines.Now as an independently listed company, Sandoz aims to increase its strategic focus, operate with greater agility, set clearer business objectives, enhance shareholder returns, and strengthen its culture for us, the Sandoz associates.This is an exciting time in our history, and by creating a new and ambitious path, it will provide a unique opportunity for us all, both professionally and personally. Join us as a Founder of our 'new' Sandoz!The roleAs part of the Identity and Access Management team, the Directory Services Lead will be responsible for Active Directory services at Sandoz.Your Key Responsibilities:Your responsibilities include, but not limited to:Lead and deliver the design, engineering, and implementation of directory services at Sandoz, including but not limited to:Directory schema design and improvementsOU structure design and improvementsDirectory Group managementIndexing and performance of directory servicesHigh availability and scalabilityAD to Azure AD migration, synchronization of identitiesSecurity configurations, GPOs maintenance and updatesDesign standard integration patternsDrive and design integration with various applications (consumers of directory services)User attributes and compliance with applicable regulationsKnowledge management of the solutionConduct internal assessments and analyse the results at least once each year about the 'health check' of the directory services environmentParticipate in vendor selection, contract negotiation with technology vendors and service providersResponsible for maintaining and transitioning the design and configuration changes to the operations teamAct as escalation point for major incidents and guide operations team in resolving active incidentsClearly and confidently communicate technical concepts and risks to senior decision-makers across the organizationWhat you'll bring to the role:Essential Requirements:At least 10 years of experience managing directory services in a highly regulated environment.Experience in systems hardening, networking (LAN, WAN), Disaster Recovery, Security Monitoring tool, etc..Prior experience in implementing and operating large scale enterprise-wide directory services.Hands on experience installing, configuring, upgrading AD configuration changes, schema extensions/modifications, set up of GPO's, OU's, trusts, etc.Strong understanding of identity and access management principles, including LDAP, Kerberos, SAML, and multi-factor authentication.Experience with directory services integration, including LDAP, Azure AD, and third-party identity providers
