Cybersecurity – Identity & Access Management (IAM) Engineer

Introduction to the role

Every medicine we discover, every clinical trial we run and every patient record we hold depends on our systems and science being secure. At AstraZeneca, Cyber Security protects the infrastructure behind drug discovery, clinical development, manufacturing and the delivery of medicines to patients around the world.

As a Cybersecurity – Identity & Access Management Engineer, you will help protect the digital identities that enable our researchers, clinicians and colleagues to access critical systems securely and efficiently.

You will support, maintain and improve enterprise Identity and Access Management services across on-premises and cloud environments. Working with Active Directory, Microsoft Entra ID and hybrid identity technologies, you will provide operational support for authentication, authorization, password management, multifactor authentication, Windows File Share access and identity lifecycle management.

Working across Cyber Security, infrastructure, cloud, application and support teams, you will resolve complex identity issues, support high-priority incidents and automate IAM processes. Your work will help ensure that the right people have the right access at the right time, while protecting the science behind life-changing medicines.

Accountabilities

In this role, you will:

• Support, maintain and improve enterprise IAM services across on-premises and cloud environments, ensuring secure and reliable authentication, authorization and identity lifecycle management.
• Administer Active Directory Domain Services, including domain controllers, organizational units, trusts and directory infrastructure.
• Support and troubleshoot hybrid identity environments that integrate Active Directory and Microsoft Entra ID, including identity synchronization and provisioning processes.
• Manage and troubleshoot authentication services, including multifactor authentication, Self-Service Password Reset, passwordless authentication, Conditional Access and federation services.
• Manage and troubleshoot Windows File Share access, including permissions and group-based access, to ensure appropriate and secure access to enterprise resources.
• Support joiner, mover and leaver processes, including user provisioning, deprovisioning, group management and access reviews.
• Administer Microsoft Entra ID services, including enterprise applications, application registrations, authentication methods and identity governance capabilities.
• Investigate and resolve issues involving authentication, account access, identity synchronization, group membership and authorization.
• Troubleshoot and maintain Active Directory replication, DNS, DHCP, domain controller health, Kerberos authentication, LDAP connectivity and Group Policy Objects.
• Implement and maintain identity security controls and privileged access management processes in line with established security, risk, compliance and architectural standards.
• Support high-priority incidents, including incident triage, prioritization, stakeholder communication, escalation management and service-restoration activities.
• Balance operational support, project activities, incidents, service requests and unplanned work according to business impact, urgency, risk and established service-management processes.
• Identify opportunities to automate repetitive IAM activities using PowerShell and other technologies to improve efficiency, consistency and service reliability.
• Collaborate with business users, Cyber Security, infrastructure, cloud, application and support teams, managing expectations and ensuring requests follow approved support channels and processes.

Essential experience, skills and knowledge

You will need:

• Strong experience supporting Active Directory Domain Services (AD DS) in a complex enterprise environment.
• Hands-on experience administering Microsoft Entra ID, including identity synchronization, authentication methods and enterprise applications.
• Experience supporting hybrid identity environments that integrate on-premises Active Directory with cloud identity platforms.
• Experience supporting and troubleshooting Windows File Share access, including permissions and group-based access management.
• Experience supporting and troubleshooting multifactor authentication, Self-Service Password Reset, passwordless authentication and user credential management.
• A strong understanding of authentication and federation technologies, including Kerberos, LDAP, SAML, OAuth, OpenID Connect and federation services.
• Experience managing and troubleshooting Group Policy Objects and related directory-services configurations.
• A good understanding of DNS, DHCP, Active Directory replication, domain controller operations and Windows Server administration.
• Strong analytical and problem-solving skills, with experience diagnosing and resolving complex identity and access management issues.
• Experience developing scripts and automating IAM processes using PowerShell or similar technologies.
• Experience supporting and coordinating responses to high-priority incidents, including triage, prioritization, stakeholder communication, escalation management and service restoration.
• The ability to manage operational support, project activities, incidents, service requests and unplanned work according to business impact, urgency and risk.
• The ability to engage effectively with business users, technical teams and support organizations, manage expectations and ensure requests are routed through approved support channels.
• A degree in Information Technology, Computer Science, Cybersecurity, Engineering or a related discipline, or equivalent practical experience.

Desirable experience, skills and knowledge

It would also be useful to have:

• Experience with Microsoft security technologies such as Conditional Access, Identity Protection, Privileged Identity Management and Identity Governance.
• Knowledge of Microsoft Azure and cloud identity architectures.
• Experience with privileged access management technologies such as CyberArk, Akeyless, BeyondTrust or similar solutions.
• Exposure to identity governance, access certification, role-based access control and compliance controls.
• Experience working with security controls, audit requirements and compliance expectations in a regulated enterprise environment.

Why join AstraZeneca’s Cyber Security team?

Join a global Cyber Security function where your IAM expertise will help protect the systems behind scientific discovery and the delivery of medicines to patients. You will work at enterprise scale, collaborate with experienced security specialists, and help build secure and resilient identity services as AI and data reshape the threat landscape.

Working at AstraZeneca

When we put unexpected teams in the same room, we unleash bold thinking with the power to inspire life-changing medicines. In-person working gives us the platform we need to connect, work at pace and challenge perceptions.

That is why we work, on average, a minimum of three days per week from the office. However, that does not mean we are not flexible. We balance the expectation of being in the office while respecting individual flexibility. Join us in our unique and ambitious world.

Ready to make an impact?

If you are ready to secure digital identities at global scale and help protect the science behind life-changing medicines, apply today.

#Cyber

Date Posted

Closing Date

AstraZeneca embraces diversity and equality of opportunity.  We are committed to building an inclusive and diverse team representing all backgrounds, with as wide a range of perspectives as possible, and harnessing industry-leading skills.  We believe that the more inclusive we are, the better our work will be.  We welcome and consider applications to join our team from all qualified candidates, regardless of their characteristics.  We comply with all applicable laws and regulations on non-discrimination in employment (and recruitment), as well as work authorization and employment eligibility verification requirements.