IAM & PKI Security Engineer: Certificate Services

AstraZeneca; Región Centro; Híbrido; MXN 600.000 - 1.200.000; Jornada completa

Descripción de la vacante

AstraZeneca is seeking a Cyber Security IAM Engineer to protect digital identities, certificates and authentication services across on‑premises and cloud environments. You will manage certificate services, AD DS, Entra ID, and identity governance at enterprise scale.

The role emphasizes automation with PowerShell, incident response, and collaboration with Cyber Security, infrastructure and application teams to ensure secure access for researchers and colleagues.

Formación

• Experience with Active Directory Certificate Services and/or Certificate Services and Public Key Infrastructure.
• Knowledge of certificate lifecycle management, certificate templates and certificate-based authentication.
• Strong experience supporting Active Directory Domain Services in a complex enterprise environment.
• Hands‑on experience administering Microsoft Entra ID, including identity synchronization, authentication methods and enterprise applications.
• Experience supporting hybrid identity environments integrating on-premises Active Directory with cloud identity platforms.
• A strong understanding of authentication and federation technologies, including Kerberos, LDAP, SAML, OAuth, OpenID Connect and federation services.
• Experience managing and troubleshooting Group Policy Objects and related directory‑services configurations.
• A good understanding of DNS, DHCP, Active Directory replication, domain controller operations and Windows Server administration.
• Strong analytical and problem‑solving skills, with experience diagnosing and resolving complex identity and access management issues.
• Experience developing scripts and automating IAM processes using PowerShell or similar technologies.
• Experience supporting and coordinating responses to high-priority incidents, including triage, prioritization, stakeholder communication, escalation management and service restoration.
• The ability to manage operational support, project activities, incidents, service requests and unplanned work according to business impact, urgency and risk.
• The ability to engage effectively with business users, technical teams and support organizations, manage expectations and ensure requests follow approved support channels and processes.
• A degree in Information Technology, Computer Science, Cybersecurity, Engineering or a related discipline, or equivalent practical experience.

Responsabilidades

• Support, maintain and improve enterprise IAM across on-premises and cloud environments, ensuring secure and reliable authentication, authorization, certificate-based security and identity lifecycle management.
• Support Active Directory Certificate Services and Public Key Infrastructure, including certificate lifecycle management and certificate-based authentication.
• Administer Active Directory Domain Services, including domain controllers, organizational units, trusts and directory infrastructure.
• Support and troubleshoot hybrid identity environments integrating Active Directory and Microsoft Entra ID, including identity synchronization and provisioning processes.
• Manage and support authentication services, including multifactor authentication, Self-Service Password Reset, passwordless authentication, Conditional Access and federation services.
• Support joiner, mover and leaver processes, including user provisioning, deprovisioning, group management and access reviews.
• Administer Microsoft Entra ID services, including enterprise applications, application registrations, authentication methods and identity governance capabilities.
• Investigate and resolve issues involving certificate services, authentication, account access, identity synchronization, group memberships and authorization.
• Troubleshoot and maintain Active Directory replication, DNS, DHCP, domain controller health, Kerberos authentication, LDAP connectivity and Group Policy Objects.
• Implement and maintain identity security controls and privileged access management processes in line with established security, risk, compliance and architectural standards.
• Support high-priority incidents, including triage, prioritization, stakeholder communication, escalation management and service restoration.
• Manage operational support, project activities, incidents, service requests and unplanned work according to business impact, urgency, risk and established service management processes.
• Identify opportunities to automate repetitive IAM and certificate-management activities using PowerShell and other technologies to improve efficiency, consistency and service reliability.
• Maintain technical documentation, runbooks, operational procedures and knowledge articles to support service continuity and audit readiness.
• Collaborate with business users, Cyber Security, infrastructure, cloud, application and support teams, managing expectations and ensuring requests follow approved support channels and processes.

Conocimientos

AD CS

PKI

Azure AD

Identity lifecycle

Authentication protocols

Group Policy

PowerShell

Hybrid identity

PAM

Incident management

Educación

Bachelor's in IT/CS/Cybersecurity

Herramientas

Active Directory

Microsoft Entra ID

Windows Server

Descripción del empleo

AstraZeneca is seeking a Cyber Security IAM Engineer to protect digital identities, certificates and authentication services across on‑premises and cloud environments. You will manage certificate services, AD DS, Entra ID, and identity governance at enterprise scale.

The role emphasizes automation with PowerShell, incident response, and collaboration with Cyber Security, infrastructure and application teams to ensure secure access for researchers and colleagues.