Senior IT Engineer - Identity & Access Management

About the position

As a Senior IT System Engineer - Identity Specialist, you will be responsible for the strategic ownership, design, and development of our corporate identity solutions using Microsoft Entra. This role requires a profound expertise in identity and access management (IAM) principles, and mandates a leadership role in shaping and securing our identity solutions in alignment with our company's Zero-Trust security framework.

Responsibilities

• Own a domain as the subject matter expert, staying up to date on new trends and capabilities within the supporting tools and incorporating relevant changes into our Corporate IT roadmap
• Collaborate with other Corporate IT senior engineers, solution architects, domain experts and Helpdesk staff to test, deploy, communicate and support end user impacting changes into our Corporate IT
• Coordinate medium to large scale corporate IT projects, defining business requirements, designing technical solutions and coordinating a squad of L2 Engineers for its implementation, testing, global deployment and maintenance
• Work in autonomy to translate business requirements into technical solutions, leveraging our existing ecosystem and licenses everywhere possible
• Automate tasks or empower end users with self-service capabilities, in respect of our security policies, to reduce maintenance and support overhead across the team
• Oversee the definition and maintenance of our documentation corpus, both technical and end-user oriented, to facilitate maintenance and troubleshooting tasks.
• Designing, implementing and maintaining Corporate IT services in the areas of Identity & Access Management, Conditional Access Policies, Permissions Management, Privileged Access Management, IAM Solutions, B2B Security, Workload Identities, Modern Authentication Technologies, SSO and automated provisioning for Corporate Apps.
• Ensure that you adhere to the Governance, Risk & Compliance (GRC) obligations for your role.
• Identify and raise any non-compliance incidents promptly to your line manager.
• Challenge processes, policies and projects that will negatively impact compliance within the Group.
• Complete all mandatory compliance training assigned to you.
• Reach out to the Compliance Teams if unsure of any of your compliance obligations or the requirements are unclear.

Requirements

• Educational Background: Master degree in Computer Science, Information Technology, or a related field.
• Experience: Proven experience in Microsoft-heavy ecosystem, including Entra, Defender, Purview, Azure, Intune, Office365 product lines.
• Certification: Relevant Microsoft certifications such as SC-300 (most-desirable), SC-100 SC-400, MD-102, MS-102, MS-900, AZ-140, AZ-104, AZ-900 are highly regarded.
• MacOS Management: Experience handling MacOS devices in an Enterprise environment is a plus.
• Technical Skills: Proficiency in scripting and query languages like KQL, Python, Bash, and PowerShell is a plus.
• Cultural and Language Proficiency: Strong understanding of European work culture with excellent proficiency in English, both written and spoken.
• Project Management: Self-driven and autonomous, with a proven track record of successfully handling the design and coordination of end user impacting change across thousands of employees spread over multiple locations.
• Interpersonal Skills: Exceptional communication and interpersonal skills, capable of engaging directly with stakeholders at various levels within the organization.

Nice-to-haves

• Extended knowledge in at least one of the following domains: Endpoint management, Application & Data Management, Infrastructure & Corporate Network.
• As an 'Endpoint' specialist: Define, implement, and maintain security baselines for all company endpoints, including Windows laptops, Macbooks, company iPhones, and Android phones.
• As an 'Applications & Data management' specialist: Define, implement, and maintain data labelling and retention policies based on business requirements.
• As an 'Infrastructure' specialist: Manage VDI infrastructure for hundreds of employees, ensuring high availability and optimal performance.