Identity & Authentication Management Engineer

Boehringer Ingelheim Pharmaceuticals, Inc.; Buenos Aires; On-site; ARS 1,500,000 - 2,300,000; Full time

Job summary

Boehringer Ingelheim Pharmaceuticals, Inc. in Argentina is seeking a Senior Systems Engineer – Authentication Operations to join our Identity & Authentication Management team. You will operate, secure, and modernize directory and authentication services that enable trusted access across our global enterprise.

The role covers Active Directory, Microsoft Entra ID, MFA, hybrid identity, and PKI, with hands-on administration, security hardening, and privileged-change governance.

Qualifications

• Bachelor's degree in Computer Science, IT, or equivalent practical experience.
• Strong experience supporting enterprise authentication in hybrid environments.
• Operational AD administration and troubleshooting including domain controllers, DNS, GPO, backup/recovery.
• Hands-on with Microsoft Entra ID, Conditional Access, MFA, PIM, tenant security configuration, and admin delegation.
• Experience with Entra Connect or Cloud Sync and troubleshooting hybrid identity sync.
• Understanding of tiering/enterprise access models, secured admin workstations, just-in-time access, least-privilege.
• Identity incident response, vulnerability remediation, controlled privileged change execution.
• Knowledge of PKI, certificate lifecycle, encryption, Kerberos/LDAP.
• Secure PowerShell scripting, Microsoft Graph, automation tooling.
• ITIL-based service management, change-control, peer-review, four-eyes approval processes.
• Familiarity with AI-assisted support or data-driven operations is a plus.
• Fluent written and spoken English.
• Certifications such as Identity/Access Administrator etc. are a plus.

Responsibilities

• Provide L3 operational support for AD, Entra ID, MFA, hybrid identity, and PKI services.
• Perform privileged administration using dedicated administrative identities, Privileged Access Workstations or secured admin workstations, and just-in-time role activation through Privileged Identity Management.
• Administer and troubleshoot Active Directory in complex multi-domain and multi-forest environments, including domain controllers, replication, Sites and Services, DNS dependencies, and Group Policy.
• Maintain the supporting infrastructure for highly critical authentication systems, including Windows, hardware, connectivity, etc.
• Support Active Directory backup, recovery, and disaster-recovery testing to ensure directory-service resilience and recoverability.
• Operate within tiering or enterprise access models and securely manage privileged groups, service accounts, administrative role delegation, and least-privilege controls.
• Perform security hardening and remediate identity-related vulnerabilities across Active Directory and Microsoft Entra ID.
• Provide operational support for Conditional Access, authentication methods, MFA policies, tenant-level security configurations, and controlled change execution.
• Administer and troubleshoot hybrid identity and directory synchronization using Microsoft Entra Connect or Cloud Sync.
• Manage certificate lifecycle activities, including issuance, renewal, revocation, and compliance monitoring.
• Resolve incidents and service requests; lead identity incident response and root cause analysis for recurring issues.
• Plan and execute privileged changes with peer review or four-eyes approval, validation, rollback planning, and audit evidence.
• Maintain operational documentation, knowledge articles, recovery procedures, and runbooks while driving continuous service improvement.

Skills

Active Directory

Microsoft Entra ID

MFA

Privileged Identity Management

PKI

Kerberos/LDAP

PowerShell scripting

Microsoft Graph

ITIL service management

Security hardening

Identity incident response

Just-in-time access

Least-privilege

Tenant security config

Automation tooling

Education

Bachelor's degree in Computer Science / Information Technology

Tools

Microsoft Entra Connect

Cloud Sync

Privileged Access Workstations

Group Policy

Job description

Identity & Authentication Management Engineer

The Position

Join our Cyber Security - Identity & Authentication Management (IAM) Operations team as a Senior Systems Engineer – Authentication Operations. In this role, you will operate, secure, and modernize the directory and authentication services that enable trusted access across our global enterprise.

Working across Active Directory, Microsoft Entra ID, Multi-Factor Authentication (MFA), hybrid identity, and Public Key Infrastructure (PKI), you will perform authorized privileged administration within a controlled enterprise access model. You will use dedicated administrative identities, Privileged Access Workstations or other secured admin workstations, and just-in-time role activation while collaborating with global teams to maintain secure, resilient, and compliant services.

Tasks and responsibilities

• Provide L3 operational support for Active Directory, Microsoft Entra ID, MFA, hybrid identity, and PKI services.
• Perform authorized privileged administration activities in Active Directory and Microsoft Entra ID using dedicated administrative identities, Privileged Access Workstations or secured admin workstations, and just-in-time role activation through Privileged Identity Management.
• Administer and troubleshoot Active Directory in complex multi-domain and multi-forest environments, including domain controllers, replication, Sites and Services, DNS dependencies, and Group Policy.

Maintain the supporting infrastructure for highly critical authentication systems, including Windows, hardware, connectivity, etc.

• Support Active Directory backup, recovery, and disaster-recovery testing to ensure directory-service resilience and recoverability.
• Operate within tiering or enterprise access models and securely manage privileged groups, service accounts, administrative role delegation, and least-privilege controls.
• Perform security hardening and remediate identity-related vulnerabilities across Active Directory and Microsoft Entra ID.
• Provide operational support for Conditional Access, authentication methods, MFA policies, tenant-level security configurations, and controlled change execution.
• Administer and troubleshoot hybrid identity and directory synchronization using Microsoft Entra Connect or Cloud Sync.
• Manage certificate lifecycle activities, including issuance, renewal, revocation, and compliance monitoring.
• Resolve incidents and service requests; lead identity incident response and root cause analysis for recurring issues.
• Plan and execute privileged changes with appropriate peer review or four-eyes approval, validation, rollback planning, and audit evidence.
• Maintain operational documentation, knowledge articles, recovery procedures, and runbooks while driving continuous service improvement.

Requirements

Required

• Bachelor's degree in Computer Science, Information Technology, or equivalent practical experience.
• Strong experience supporting enterprise authentication, identity, or directory services in complex hybrid environments.
• Operational experience with Active Directory administration and troubleshooting, including domain controllers, replication, Sites and Services, DNS, Group Policy, privileged groups, service accounts, backup, and recovery.
• Hands-on experience with Microsoft Entra ID, Conditional Access, authentication methods, MFA, Privileged Identity Management, tenant-level security configuration, and administrative role delegation.
• Experience with Microsoft Entra Connect or Cloud Sync and troubleshooting hybrid identity and directory synchronization.
• Practical understanding of tiering or enterprise access models, dedicated administrative identities, secured administrative workstations, just-in-time access, and least-privilege principles.
• Experience with identity incident response, security hardening, vulnerability remediation, and controlled privileged change execution.
• Knowledge of PKI, certificate lifecycle management, encryption technologies, and authentication protocols such as Kerberos and LDAP.
• Experience with secure PowerShell scripting, Microsoft Graph, automation, or operational tooling.
• Experience working within ITIL-based service management, change-control, peer-review, and four-eyes approval processes.
• Familiarity with AI-assisted support, automation, or data-driven operational practices is an advantage.
• Strong analytical, problem-solving, and communication skills, with fluent written and spoken English.
• Relevant certifications are an advantage, such as Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Cybersecurity Architect Expert, Microsoft Certified: Azure Solutions Architect Expert, or relevant Active Directory, PKI, or security certifications.