Find Jobs

The Opportunity:

At Avantor, people are the most important part of our success because they drive our global performance. That's why our Operations, Lab Services, Sales, and many other Avantor teams rely on our talent acquisition initiatives to attract, engage and hire the right talent. Avantor's IT Engineering vertical is a crucial part of this mix, enabling all our internal teams worldwide to grow beyond their limits.

The Identity and Access Management Systems Engineer is responsible for improving and maintaining Avantor's unregulated as well as the GCC (Government Community Cloud)/regulated enterprise Active Directory environments and processes. As the IAM Systems Engineer you will interact directly with the other Engineering Services Teams, Engineering Architects, cloud providers as well as other system administrators to deliver AD and IAM best practices for on-premises and cloud-based solutions for employees, contractors, vendors, and guests. The IAM Systems Engineer will serve as a subject matter expert in identity management and authentication technologies. Provide global 3rd level support and troubleshooting for core Active Directory services, Azure AD services, related AD management tools and cloud single sign-on integrations. As part of this well-respected IT group, you will enjoy a wide variety of self-directed work within a supportive team environment.

This position reports to the Engineering Manager - IAM Services and is a hybrid role reporting to our corporate headquarters in Radnor, PA 2-4 times per week.

What we're looking for

• Education: Bachelor's Degree in Computer Science or Equivalent Work Experience Required
  • Microsoft certification preferred
  • AWS and/or Azure certification is a plus
• Experience: Minimum of 3 years technical experience with Active Directory and IAM Services
  • Experience contributing to large scale AD consolidation and decommissioning projects
  • Industry experience in pharma, life sciences, warehouse and/or manufacturing is a plus
  • Strong knowledge of Active Directory and Entra ID (Azure AD) services e.g. - AD Domain Services, Azure AD Connect, GPOs, DHCP, DNS, AD Certificate Services, DFS, MIM, MFA, SSO, etc.
  • Strong knowledge of AD Integration, synchronization and federation with Azure, Entra ID (Azure AD), Office 365, Duo, Identity Governance (e.g. Okta) as well as Windows Server OS
  • Strong knowledge of Active Directory and Entra ID (Azure AD) security best practices
  • Strong knowledge of implementing Active Directory and Entra ID (Azure AD) at enterprise scale.
  • Good knowledge of designing and implementing policies around Delegated Administration for managing Group Policy Objects, Servers, Devices, and Shared Drives
  • Good experienced in Active Directory and Entra ID (Azure AD) incident and problem management
  • Good knowledge of cloud technologies, especially AWS would be a plus
  • Good knowledge of PAM technologies, especially CyberArk would be a plus
  • Good knowledge of Identity technologies, especially Saviyant would be a plus

Who you are

• Broad knowledge of information technologies
• Strong PowerShell or other scripting skills
• Demonstrated excellence in a variety of competencies including teamwork/collaboration, analytical thinking, and troubleshooting
• Excellent written and verbal communication skills
• Good presentation skills
• Accustomed to work within the ITIL/ITSM framework of Incident, Problem, Change, and release management
• Ability to be an on-call escalation point for production support and scheduled off hours/weekend work if/when required
• Desire to focus on and please the customer, ability to understand requests from the customer's point of view
• Experience leading project initiatives, effectively communicating requirements, and delegating project tasks as needed
• Commitment to high professional and ethical standards in a diverse workplace
• Self-motivated and flexible

How you will create an impact

• Implements and supports Microsoft Active Directory, Entra ID, and IAM Services
• Implements and enforces Active Directory strategy for the consolidation of multiple AD domains in
• support of the company's post-merger integration plans.
• Implements and enforces SSO integration and standards with O365 within Avantor's application
• landscape.
• Implements and enforces policies and governance for Active Directory in an enterprise setting.
• Implements and enforces processes and workflows to ensure IAM compliance.
• Implements and enforces Multifactor Authentication (MFA), Privileged Access Management (PAM), and
• Identity Provisioning and Governance Tools.
• Implements and enforces standards and processes for the administration of Active Directory and its
• supporting systems.
• Other duties as assigned

Disclaimer:

The above statements are intended to describe the general nature and level of work being performed by employees assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of employees assigned to this position. Avantor is proud to be an equal opportunity employer.

Why Avantor?

Dare to go further in your career. Join our global team of 14,000+ associates whose passion for discovery and determination to overcome challenges relentlessly advances life-changing science.

The work we do changes people's lives for the better. It brings new patient treatments and therapies to market, giving a cancer survivor the chance to walk his daughter down the aisle. It enables medical devices that help a little boy hear his mom's voice for the first time. Outcomes such as these create unlimited opportunities for you to contribute your talents, learn new skills and grow your career at Avantor.

We are committed to helping you on this journey through our diverse, equitable and inclusive culture which includes learning experiences to support your career growth and success. At Avantor, dare to go further and see how the impact of your contributions set science in motion to create a better world. Apply today!

EEO Statement:

We are an Equal Employment/Affirmative Action employer and VEVRAA Federal Contractor. We do not discriminate in hiring on the basis of sex, gender identity, sexual orientation, race, color, religious creed, national origin, physical or mental disability, protected Veteran status, or any other characteristic protected by federal, state/province, or local law.

If you need a reasonable accommodation for any part of the employment process, please contact us by email at let us know the nature of your request and your contact information. Requests for accommodation will be considered on a case-by-case basis. Please note that only inquiries concerning a request for reasonable accommodation will be responded to from this email address.

For more information about equal employment opportunity protections, please view the Equal Employment Opportunity is THE LAW Poster, EEO is the Law Poster Supplement, and Pay Transparency Non-Discrimination Provision.

3rd Party Non-Solicitation Policy:

By submitting candidates without having been formally assigned on and contracted for a specific job requisition by Avantor, or by failing to comply with the Avantor recruitment process, you forfeit any fee on the submitted candidates, regardless of your usual terms and conditions. Avantor works with a preferred supplier list and will take the initiative to engage with recruitment agencies based on its needs and will not be accepting any form of solicitation.