Identity and Access Management Engineer

The Active Directory / Entra ID Engineer is responsible for designing, developing, and operating the B. Braun Active Directory and Entra ID platform. The role focuses on acting as a subject matter expert for directory, authentication, and provisioning services, including Active Directory, Entra ID and related complex services.

Duties and Responsibilities:

• Design, implement, and continuously improve B. Braun's enterprise identity infrastructure across Active Directory, Microsoft Entra ID, and hybrid identity environments.
• Strengthen the organization's security posture by driving Zero Trust initiatives, privileged access management, conditional access, multi-factor authentication, and secure authentication solutions.
• Partner with Infrastructure, Security, Audit, Compliance, and business teams to deliver reliable, compliant, and scalable identity and access management services.
• Lead the development and optimization of authentication and authorization concepts, ensuring the integrity, availability, and resilience of identity services.
• Drive operational excellence through automation, proactive monitoring, incident resolution, root cause analysis, and continuous service improvement.

Required Qualifications:

• Extensive hands-on experience with Microsoft Active Directory, Microsoft Entra ID, hybrid identity architectures, and enterprise authentication technologies.
• Strong expertise in identity protocols and integrations, including SAML, OAuth2, OpenID Connect (OIDC), LDAP, SCIM, and federation services.
• Deep understanding of identity-centric security principles, Zero Trust Architecture, privileged access management, and cloud security models.
• Advanced PowerShell scripting and automation skills with the ability to simplify complex operational processes.
• Strong analytical, problem-solving, and troubleshooting capabilities combined with the ability to communicate effectively with both technical and business stakeholders.
• Bachelor's or Master's degree in Computer Science, Information Systems, Engineering, or equivalent practical experience; relevant Microsoft certifications are a plus.

What we offer:

• Working alongside global teams and subject matter experts to shape the future of enterprise identity and access management at B. Braun.
• Leading innovative security initiatives and leveraging modern cloud identity technologies to protect a global workforce.
• A collaborative environment that values continuous learning, knowledge sharing, and professional development.
• The opportunity to influence enterprise-wide identity strategies and drive meaningful security improvements across the organization.
• Taking ownership of challenging, high-impact projects while contributing to a culture of operational excellence and customer-focused service delivery.