Identity Tech Specialist

The Global Digital Identity Services (GDIS) team designs and manages the identification, authentication and authorization services.

Within the GDIS team, the AM Technical Lead is responsible for technical management and evolution of the Access Management (AM) platform (B2E).

He/she is responsible for driving the operational maintenance on the AM platform, major configuration changes, and supporting entities onboarding within the AM platform.

He/she is also responsible for designing and maintaining the security level and liaising with Security Architects.

Roles & Responsibilities :

- Promote AM solution (IDP, SSO, MFA, PAM) within Sodexo organization, fostering the adoption and helping our teams fully leveraging AM capabilities
- Execute Roll-out plan with countries and global solutions
- Manage the AM Build & work closely with the Ops manager for the Run
- Provide expertise on AM technologies and more specially on Entra  One Login,ADFS, PKI (ATOS) and PAM (study ongoing).
- Produce KPIs and update/maintain dashboards regarding the roll-out of AM platform (MFA adoption, federated apps), the health of the solution and the AM roadmap.
- Accompany local IT teams (located in 150 entities / 70 countries) to deliver digital employee services to more than 420 000 employees (currently 250 000 digital identities / 150 000 identities managed by IGA tool)
- Guarantee perfect synchronization with other global teams (architecture, digital assets, platforms …)
- Interface with IT security, Compliance, Audit and GDPR teams
- to coordinate related policy and procedures
- to implement provided directives
- to provide all appropriate information
- Enforce architecture principles and objectives to secure project success and sustainability of the application in the long run

Required Skills:

- Overall 10+ years’ experience in IT, and minimum 5 years working in IDP/MFA project
- Proven expertise in AM at large scale with multi-country environment

- Experience of international environments and matrix organizations
- Technology:
- Significant expertise:
Entra  (Tenant management, AADC, App management and federation, MFA, Conditional Accesses, Identity management), Azure Automation (Power automate…), Power Shell
- Good knowledge and expertise:
Active Directory, PKI, PAM, ADFS
- Knowledge: O365, Intune
- Nice to have:
- PKI: ATOS PKI / Berrycert CLM
- IDP:
One Login
- Excellent reporting and presentation skills
- Can-do attitude and service-oriented (client focus)
- Positive mindset, structured thinking and focused on finding solutions
- Cultivates innovation:
Creates new and better ways for the organization to be successful
- Ability to work independently and manage multiple tasks simultaneously
- Rigorous, organized, transparent and team player
- Good communication skills and ability to adapt communication based on the audience (C-level, business, technical team)

Fluent in English, French is a plus