Directory Services Leader

您是否渴望助力激动人心的先进电子领域的下一次飞跃？您是否希望跟我们一起解决难题，共同推动电子技术和互联科技的快速发展？那么，带着您的解决问题的能力、热情和创造力，与我们一起推动电子领域的下一次飞跃。

在启诺迪，我们不仅是先进电子和高科技领域材料及解决方案的全球领导者，更是一个紧密团结、充满激情、勇于挑战的团队。我们所有敬业的团队都致力于将尖端技术变为现实。我们重视具有前瞻性思维的挑战者、突破界限的开拓者以及各个部门的多元化视角，因为我们深知，我们在推动世界进步、造福全人类方面扮演着至关重要的角色。了解如何加入我们，开启或加速您的职业生涯。

Qnity is seeking a Directory Services Leader to lead and operate enterprise directory and identity services across Microsoft Active Directory, Microsoft Entra , hybrid identity, privileged access, and integration with Saviynt IGA and PAM.

This is a hands-on working manager role responsible for the reliability, security, governance, and continuous improvement of the identity platforms supporting Qnity users, endpoints, servers, applications, cloud services, manufacturing environments, and privileged access.

The Directory Services Leader will manage identity engineers and service partners while remaining directly involved in architecture, implementation, technical review, troubleshooting, incident response, and operational support. The successful candidate must be able to move comfortably between team leadership, service ownership, security controls, architecture, and detailed engineering work. This role is intended for an experienced identity professional who can lead the function while remaining technically capable of performing and validating the work.

• Own the operation, security, resilience, and lifecycle of Qnity directory and identity services.
• Lead the architecture, administration, and support of Microsoft Active Directory, Microsoft Entra , and hybrid identity services.
• Manage and develop identity engineers, administrators, contractors, and service providers.
• Establish technical standards, operating procedures, support models, escalation paths, and service performance expectations.
• Review and approve changes affecting domains, trusts, organizational units, group policy, directory permissions, privileged groups, synchronization, and authentication services.
• Govern Entra  roles, Privileged Identity Management, enterprise applications, application registrations, service principals, managed identities, and administrative consent.
• Lead implementation of least privilege, just-in-time administration, role-based access control, privileged account separation, and emergency-access controls.
• Oversee service accounts, group managed service accounts, non-human identities, application identities, and credential-management standards.
• Partner with Cybersecurity and IAM teams to integrate Active Directory and Entra  Saviynt IGA and PAM.
• Support identity lifecycle processes, including provisioning, deprovisioning, access requests, birthright access, access reviews, entitlement management, and segregation of duties.
• Oversee Saviynt connectors, account and entitlement reconciliation, provisioning failures, orphaned accounts, and access-removal issues.
• Lead technical design reviews for authentication, authorization, federation, privileged access, and directory integration.
• Troubleshoot complex issues involving Kerberos, LDAP, replication, synchronization, SAML, OAuth, OpenID Connect, service principals, and application access.
• Provide senior technical leadership during identity incidents, outages, account compromises, and privileged-access events.
• Ensure directory recovery, backup validation, disaster-recovery procedures, monitoring, patching, certificate renewal, and platform maintenance are performed reliably.
• Maintain accurate architecture diagrams, service inventories, operating documentation, standards, and dependency maps.
• Support internal and external audits by producing accurate evidence for identity, access, and privileged-access controls.
• Identify technical debt, control weaknesses, and operational risks, and drive…