IAM Engineer - Directory Services

Today, Lonza is a global leader in life sciences operating across three continents. While we work in science, there’s no magic formula to how we do it. Our greatest scientific solution is talented people working together, devising ideas that help businesses to help people. In exchange, we let our people own their careers. Their ideas, big and small, genuinely improve the world. And that’s the kind of work we want to be part of.

The IAM Engineer for directory services at Lonza, you will be responsible for the design, implementation, and management of Active Directory (AD) and Azure Active Directory (Azure AD) across the organization's global infrastructure. Your role will involve ensuring the security, availability, and scalability of these directory services, which are critical to the company's identity and access management framework. You will work closely with cybersecurity, IT operations, and business units to develop and enforce access control policies, manage user identities, and support seamless integration with both cloud and on-premises applications. Additionally, you will ensure that the directory services align with regulatory requirements such as GDPR and HIPAA, while continuously evaluating and adopting emerging technologies to enhance the organization's security and operational efficiency.

Key responsibilities:

• Design and Implementation of Directory Services:
  • Lead the design, deployment, and management of Active Directory (AD) and Azure Active Directory (Azure AD) environments, ensuring they are secure, scalable, and optimized for performance.
  • Develop and implement policies for directory services that align with organizational security and compliance requirements, including GDPR and HIPAA.
• Collaboration with IAM Teams:
  • Work closely with other IAM teams responsible for Identity Lifecycle, Privileged Access Management, Certificate Services, Application Lifecycle, Authentication, and Authorization to ensure seamless integration and consistent application of security policies across all identity-related areas.
• Integration and Automation:
  • Develop and implement automation scripts and tools to streamline directory management tasks, domain provisioning, standardization in the OU structure and site provisioning & deprovisioning.
  • Ensure seamless integration between AD, Azure AD, and other IAM tools, enabling a unified identity and access management platform.
• Security and Compliance:
  • Enforce and maintain strict security standards within directory services, ensuring that only authorized users have access to critical systems and data.
  • Monitor and audit directory services for compliance with internal and external regulations, identifying and mitigating any security risks.
• Directory Services Optimization:
  • Continuously evaluate and optimize the performance of directory services, implementing updates and patches as necessary.
  • Lead efforts to migrate or upgrade directory services, ensuring minimal disruption to business operations.
• Support and Collaboration with Managed Services:
  • Work closely with the IAM Managed Service team, providing them with technical guidance and support for the operational management of AD and Azure AD.
  • Act as an escalation point for complex directory services issues that cannot be resolved by the Managed Service team.
• Documentation and Training:
  • Create and maintain comprehensive documentation for directory services architecture, processes, and policies.
  • Provide training and knowledge transfer to the IAM Managed Service team and other relevant stakeholders.

Key requirements:

Technical Expertise in Directory Services:

• Extensive hands-on experience with Active Directory (AD) and Azure Active Directory (Azure AD) administration, including designing, deploying, and managing these environments in large-scale, global organizations.
• Proficiency in configuring and managing Group Policies, DNS, DHCP, and other AD-related services.

IAM Knowledge:

• Strong understanding of Identity and Access Management concepts, particularly in relation to directory services, authentication, authorization, and identity lifecycle management.
• Familiarity with other IAM domains such as Privileged Access Management (PAM), Certificate Services, and SSO/MFA solutions.

Security and Compliance Acumen:

• In-depth knowledge of security best practices related to directory services, including access controls, password policies, and audit logging.
• Experience ensuring compliance with industry regulations such as GDPR, HIPAA, and other relevant standards.

Scripting and Automation Skills:

• Proficiency in scripting languages such as PowerShell, Python, or similar, to automate directory management tasks and integrate with other IAM tools.

Problem-Solving and Troubleshooting:

• Strong analytical skills with the ability to diagnose and resolve complex issues related to directory services.
• Experience acting as an escalation point for directory services-related issues.

Collaboration and Communication:

• Ability to collaborate effectively with cross-functional teams, including cybersecurity, IT operations, and business units, to achieve shared goals.
• Strong communication skills, with the ability to document and explain technical concepts to both technical and non-technical audiences.

Continuous Learning and Adaptability:

• Commitment to staying current with the latest developments in directory services, IAM technologies, and security practices.

Ability to adapt to new technologies and methodologies as the IAM landscape evolves

Every day, Lonza’s products and services have a positive impact on millions of people. For us, this is not only a great privilege, but also a great responsibility. How we achieve our business results is just as important as the achievements themselves. At Lonza, we respect and protect our people and our environment. Any success we achieve is no success at all if not achieved ethically.

People come to Lonza for the challenge and creativity of solving complex problems and developing new ideas in life sciences. In return, we offer the satisfaction that comes with improving lives all around the world. The satisfaction that comes with making a meaningful difference.