Job Title: Senior Engineer, Identity Access Management - Directory Services

Job description

Working with Us Challenging. Meaningful. Life-changing. Those aren’t words that are usually associated with a job. But working at Bristol Myers Squibb is anything but usual. Here, uniquely interesting work happens every day, in every department. From optimizing a production line to the latest breakthroughs in cell therapy, this is work that transforms the lives of patients, and the careers of those who do it. You’ll get the chance to grow and thrive through opportunities uncommon in scale and scope, alongside high-achieving teams. Take your career farther than you thought possible. Bristol Myers Squibb recognizes the importance of balance and flexibility in our work environment. We offer a wide variety of competitive benefits, services and programs that provide our employees with the resources to pursue their goals, both at work and in their personal lives. Read more: careers.bms.com/working-with-us. Job Profile Bristol Myers Squibb (BMS) is seeking an experienced Senior Engineer – Identity Access Management (Directory Services) to design, implement, and support enterprise directory platforms that enable secure identity services across the global organization. The ideal candidate combines deep directory services expertise with strong Linux, cloud, automation, and troubleshooting skills, and thrives in a highly collaborative environment focused on innovation, reliability, security, and operational excellence. This role is responsible for ensuring stability, scalability, security, and availability of critical directory services that support authentication, authorization, and identity-related business processes across the enterprise. The successful candidate will work closely with Architecture, Infrastructure, Security, and Application teams to deliver modern identity solutions and drive continuous improvement initiatives. Key Responsibilities · Provide technical leadership for enterprise directory services platforms based on LDAP technologies, including Ping DS (formerly ForgeRock Directory Services), Ping Directory, Oracle DSEE, Microsoft Entra ID (Azure AD), and virtual directory solutions. · Design, implement, administer, monitor, and optimize directory infrastructure, including replication topologies, indexing strategies, backups, disaster recovery, performance tuning, and capacity planning. · Ensure Directory Services platforms remain secure, compliant, resilient, and highly available. · Partner with Architecture, Security, and Infrastructure teams to evaluate, implement, and integrate new technologies and solutions. · Drive modernization initiatives and proactively identify opportunities to improve performance, scalability, automation, and operational efficiency. · Support business-critical production environments and lead the resolution of complex incidents and escalations. · Conduct Root Cause Analysis (RCA), Problem Management activities, and implement preventive measures to improve service reliability. · Develop and maintain architecture documentation, technical standards, requirements, network designs, roadmaps, implementation plans, recovery procedures, rollback strategies, and disaster recovery solutions. · Direct and support installation, configuration, maintenance, patching, and lifecycle management of directory service platforms. · Collaborate effectively with internal infrastructure teams, application owners, security teams, vendors, and business stakeholders to deliver identity-related capabilities and operational support. · Demonstrate strong ownership and accountability by driving issues to resolution and leading technical initiatives across cross-functional teams. · Mentor and provide technical guidance to junior engineers and team members. · Participate in an on-call support rotation and perform maintenance, deployment, and upgrade activities during approved maintenance windows as required. Required Technical Experience · Advanced expertise with LDAP-based directory technologies, including Ping DS (ForgeRock Directory Services), Oracle DSEE, and other enterprise-grade directory solutions. · Hands-on experience with public cloud platforms such as AWS and Azure. · Strong experience administering Linux operating systems, including software installation, patching, troubleshooting, automation, and performance tuning. · Experience supporting enterprise application servers such as Apache Tomcat, JBoss, WebLogic, and WebSphere. · Strong scripting and automation skills using technologies such as Bash, PowerShell, Python, JavaScript, or similar languages. · Software development experience with knowledge of Object-Oriented Programming (OOP), REST APIs, MVC architecture, and Java frameworks such as Spring. · Strong understanding of networking concepts, including DNS, TLS/SSL, load balancers, reverse proxies, and end-to-end encryption architectures. · Experience integrating directory platforms with enterprise applications, cloud services, and third-party technologies. · Strong troubleshooting and diagnostic skills across identity platforms, infrastructure, network, and application layers. · Experience with SQL and/or PL/SQL for querying, troubleshooting, and supporting enterprise identity and directory-related applications. Preferred Qualifications · Foundational knowledge of Agentic AI concepts, frameworks, and emerging use cases, with an interest in leveraging AI-assisted capabilities to enhance identity operations, security, automation, and user experience. · Working knowledge of Access Management and Identity Federation technologies, including Single Sign-On (SSO), SAML, OAuth 2.0, OpenID Connect (OIDC), Multi-Factor Authentication (MFA), LDAP integrations. · Experience with enterprise identity platforms such as Ping Identity, ForgeRock, Okta, or Microsoft Entra ID. · Experience implementing infrastructure-as-code, automation, and DevOps practices within identity and infrastructure environments. Qualifications · 5+ years of hands-on experience administering and supporting enterprise LDAP directory solutions such as Ping DS (ForgeRock Directory Services), Oracle DSEE, or other leading enterprise-grade directory technologies. · Deep expertise in directory services engineering, architecture, troubleshooting, and operations. · Hands-on experience with cloud infrastructure platforms such as AWS and/or Azure. · Strong Linux administration experience, including deployment, patching, security, and operational support. · Experience supporting enterprise middleware and application server technologies. · Proficiency in one or more programming and scripting languages such as Python, Java, JavaScript, PowerShell, or Bash. · Strong troubleshooting skills across IAM platforms, networking, web technologies, cloud services, and enterprise integrations. · Excellent verbal and written communication skills with the ability to create technical documentation and present complex concepts to technical and non-technical audiences. · Demonstrated ability to lead technical initiatives, mentor engineers, and drive complex problem resolution. · Bachelor's degree (or equivalent experience) in Information Technology, Computer Science, Computer Engineering, or a related field. If you come across a role that intrigues you but doesn’t perfectly line up with your resume, we encourage you to apply anyway. You could be one step away from work that will transform your life and career. Uniquely Interesting Work, Life-changing Careers With a single vision as inspiring as “Transforming patients’ lives through science™ ”, every BMS employee plays an integral role in work that goes far beyond ordinary. Each of us is empowered to apply our individual talents and unique perspectives in a supportive culture, promo