Active Directory Services​/Entra Engineer

About Abb Vie

Abb Vie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology, and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about Abb Vie, please visit us  Follow @abbvie onLinked

In,Facebook,Instagram,Xand You Tube .

Join Abb Vie’s Information Security & Risk Management (ISRM) team as anIAM Directory Services Engineer, where we empower our partners to succeed by delivering the knowledge, tools, and support needed toleveragedata and technology securely and effectively. As part of our Identity & Access Management (IAM) team,you willplay a pivotal role in shaping and executing our enterprise-wide IAM strategy.

The ideal candidate will have deepexpertisein

Microsoft Entra  (formerly Azure AD), Active Directory, Certificate Services,supportingrelatedauthentication tools,andPower

Shell scriptingexperienceto design, implement, and manage Directory and Authentication solutions for our global workforce of80,000 users.

Responsibilities:

• Designing, deploying, and maintaining
  
  Microsoft Entra  (formerly Azure AD) solutions, including conditional access policies, application integrations, multi-factor authentication (MFA), single sign-on (SSO), and Zero Trust.
• Designing and managing custom roles and RBAC (Role-Based Access Control) in Entra  granular access management across hybrid and multi-cloud environments.
• Developing and maintaining
  
  Power
  
  Shell scripts to automate identity management tasks, streamline processes, and enhance operational efficiency.
• Aligning Entra  hybrid identity controls with security best practices through ongoing configuration hardening, policy tuning, and operational guardrails (e.g., Zero Trust patterns, privileged access controls).
• Collaborating with cross-functional teams to integrate enterprise applications and cloud platforms with Directory and Authentication Services.
• Performing advanced troubleshooting and root cause analysis of complex Entra  Active Directory authentication and authorization issues.
• Administering and supporting certificate lifecycle management and authentication infrastructure, including Active Directory Certificate Services (AD CS), SCEP/NDES configurations, and endpoint credential and password management tools such asSpecOpsand Last Pass.
• Staying current with industry trends and emerging technologies in IAM, AD, Azure, and related fields.

• Bachelor Degree with 5 years’ experience OR Master’s Degree with 4 years’ experience
• Respective years of demonstrated experience with a focus on Entra /Azure AD and Active Directory.
• Advancedproficiencyin Power Shell scripting for automation and management of identity systems.
• Hands-on experience with Active Directory, Entra , including conditional access, MFA, SSO, and Entra .
• Experience supporting certificate and authentication services, including Active Directory Certificate Services (AD CS).
• Excellent problem-solving skills and ability to work in a fast-paced, global environment.
• Strong collaboration skills across engineering, security, and operations teams
• In-depth knowledge of securing identity platforms and hybrid directory environments, including threat modeling and control design
• Strong communication skills with the ability to document designs, drive implementation plans, and coordinate deliverables with stakeholders

Preferred:

• 5 years’ experience with a focus on Entra /Azure AD and Active Directory.
• Microsoft certifications such as Microsoft Certified:
  Identity and Access Administrator Associate or Microsoft Certified:
  Azure Solutions Architect Expert.
• Experience supporting large-scale environments (10,000+ users; 80,000+ users preferred).
• Familiarity with cloud platforms like AWS or Google Cloud for hybrid identity solutions.
• Knowledge of security best practices and compliance frameworks (e.g., NIST, ISO 27001).
• Experience with Active Directory (AD) environments, including group policies, user provisioning, directory synchronization,and Certificate Services.
• Famili…