About the position
At Alstom, we understand transport networks and what moves people. From high-speed trains, metros, monorails, and trams, to turnkey systems, services, infrastructure, signalling and digital mobility, we offer our diverse customers the broadest portfolio in the industry. Every day, more than 80,000 colleagues lead the way to greener and smarter mobility worldwide, connecting cities as we reduce carbon and replace cars. You will be part of the Workplace and Collab Architecture team as an Azure AD - Active Directory Architect. Your main responsibilities will be the design, planning, implementation and governance of architecture. You will contribute to establish a 360° view of services through the following activities: Architecture design, business case / TCO calculation, service & process design, user experience evaluation, project delivery, quality and conformity audits, roadmap definition and cost optimization. As an architect, you will also be interacting with Operations Management team and solution vendors to coordinate resolution of problems requiring Level 4 support. Work with program team to deliver the identified projects.
Responsibilities
- Accountable for all Enterprise AD and Azure AD environments hosted and maintained in and for Alstom Transport IS&T infrastructure.
- Responsible for planning and designing of Active Directory installations across the organization.
- Drive the execution of the next generation of Active Directory (AD) technologies, M365 services, Intune including owning the overall roadmap.
- Designing and deploying Intune related policies and features (which may also include SCEP profiles/VPN/WIFI profiles deployment).
- Work closely with technology and business stakeholders across the organization.
- Establish AD security architecture and strategies.
- Securely manage authentication and authorization solutions for on-premise and cloud solutions.
- Develop metrics that demonstrate the current risk state, indicators of progress, and directory services business alignment.
- Monitor technology and security developments to ensure the company's security framework follows industry best practices.
- Participate in the analysis, design and implementation of future infrastructure systems and services.
- Perform capacity planning, upgrades and expansion of Active Directory environment.
- Maintain effective communications with vendors, peers and clients in support of assigned projects.
- Collaborate with business partners and the various IT functional areas to prioritize projects, and develop and implement system plans that address the functional requirements of the business, and adhere to established strategic business and systems objectives.
Requirements
- Graduated with an engineering degree, preferably in information technology, you have more than 8 years of relevant experience.
- Should have very good general design and architecture knowledge.
- Good knowledge of ITIL processes and framework.
- Ability to collaborate, influence and motivate cross-functional teams.
- Ability and flexibility to adapt to change, including shifting and competing priorities.
- Demonstrates strong customer, quality, cost and delivery focus.
- Advanced understanding of IAM solutions and related technologies including Azure AD, Microsoft Identity Manager (MIM), Kerberos, LDAP, SAML, group and role mapping, PKI, DNS, DHCP and GPO implementations.
- AD Migration projects (company acquisitions AD merge, consolidation or optimization AD environment) hands on experience.
- Good Knowledge on M365 services and Intune solutions.
- Should have hands on experience in DR tests/gone through DR activity.
- Good to have experience in handling security/compliance Audits related to Active Directory.
- Project experience with AD migration activities and infra upgradation activities (OS upgrade, functional level upgrade).
Benefits
- Equal-opportunity employer that celebrates diversity.
- Commitment to creating an inclusive workplace.
A Smarter and Faster Way to Build Your Resume