Buenos Aires Identity & Authentication Management Engineer Arge

Job description

The Position Join our Cyber Security - Identity & Authentication Management (IAM) Operations team as a Senior Systems Engineer – Authentication Operations . In this role, you will operate, secure, and modernize the directory and authentication services that enable trusted access across our global enterprise. Working across Active Directory, Microsoft Entra ID, Multi-Factor Authentication (MFA), hybrid identity, and Public Key Infrastructure (PKI) , you will perform authorized privileged administration within a controlled enterprise access model. You will use dedicated administrative identities, Privileged Access Workstations or other secured admin workstations, and just-in-time role activation while collaborating with global teams to maintain secure, resilient, and compliant services. Tasks and responsibilities • Provide L3 operational support for Active Directory, Microsoft Entra ID, MFA, hybrid identity, and PKI services. • Perform authorized privileged administration activities in Active Directory and Microsoft Entra ID using dedicated administrative identities, Privileged Access Workstations or secured admin workstations, and just-in-time role activation through Privileged Identity Management. • Administer and troubleshoot Active Directory in complex multi-domain and multi-forest environments, including domain controllers, replication, Sites and Services, DNS dependencies, and Group Policy. • Maintain the supporting infrastructure for highly critical authentication systems, including Windows, hardware, connectivity, etc. • Support Active Directory backup, recovery, and disaster-recovery testing to ensure directory-service resilience and recoverability. • Operate within tiering or enterprise access models and securely manage privileged groups, service accounts, administrative role delegation, and least-privilege controls. • Perform security hardening and remediate identity-related vulnerabilities across Active Directory and Microsoft Entra ID. • Provide operational support for Conditional Access, authentication methods, MFA policies, tenant-level security configurations, and controlled change execution. • Administer and troubleshoot hybrid identity and directory synchronization using Microsoft Entra Connect or Cloud Sync. • Manage certificate lifecycle activities, including issuance, renewal, revocation, and compliance monitoring. • Resolve incidents and service requests; lead identity incident response and root cause analysis for recurring issues. • Plan and execute privileged changes with appropriate peer review or four-eyes approval, validation, rollback planning, and audit evidence. • Maintain operational documentation, knowledge articles, recovery procedures, and runbooks while driving continuous service improvement. Requirements Required • Bachelor's degree in Computer Science, Information Technology, or equivalent practical experience. • Strong experience supporting enterprise authentication, identity, or directory services in complex hybrid environments. • Operational experience with Active Directory administration and troubleshooting, including domain controllers, replication, Sites and Services, DNS, Group Policy, privileged groups, service accounts, backup, and recovery. • Hands-on experience with Microsoft Entra ID, Conditional Access, authentication methods, MFA, Privileged Identity Management, tenant-level security configuration, and administrative role delegation. • Experience with Microsoft Entra Connect or Cloud Sync and troubleshooting hybrid identity and directory synchronization. • Practical understanding of tiering or enterprise access models, dedicated administrative identities, secured administrative workstations, just-in-time access, and least-privilege principles. • Experience with identity incident response, security hardening, vulnerability remediation, and controlled privileged change execution. • Knowledge of PKI, certificate lifecycle management, encryption technologies, and authentication protocols such as Kerberos and LDAP. • Experience with secure PowerShell scripting, Microsoft Graph, automation, or operational tooling. • Experience working within ITIL-based service management, change-control, peer-review, and four-eyes approval processes. • Familiarity with AI-assisted support, automation, or data-driven operational practices is an advantage. • Strong analytical, problem-solving, and communication skills, with fluent written and spoken English. Desirable • Relevant certifications are an advantage, such as Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Cybersecurity Architect Expert, Microsoft Certified: Azure Solutions Architect Expert, or relevant Active Directory, PKI, or security certifications. Apply now » Find similar jobs: • Data Privacy © 2010-2025 Boehringer Ingelheim GmbH. All rights reserved