Bayan Lepas Identity And Access Management Engineer

Job description

You’re an important part of our future. Hopefully, we're also a part of your future! At B. Braun, we protect and improve the health of people worldwide. You support this vision, bringing expertise and sharing innovation, efficiency and sustainability as values. That’s why we would like to keep developing our company with you. Keeping your future in mind, we’re making a joint contribution to health care worldwide, with trust, transparency and appreciation. That's Sharing Expertise. Identity and Access Management Engineer Company: B. BRAUN MEDICAL IND. S/B Job Posting Location: Bayan Lepas, Penang, Malaysia Functional Area: Information Technology Working Model: Hybrid Requisition ID: 14690 The Active Directory / Entra ID Engineer is responsible for designing, developing, and operating the B. Braun Active Directory and Entra ID platform. The role focuses on acting as a subject matter expert for directory, authentication, and provisioning services, including Active Directory, Entra ID and related complex services. Duties and Responsibilities: Design, implement, and continuously improve B. Braun's enterprise identity infrastructure across Active Directory, Microsoft Entra ID, and hybrid identity environments. Strengthen the organization's security posture by driving Zero Trust initiatives, privileged access management, conditional access, multi-factor authentication, and secure authentication solutions. Partner with Infrastructure, Security, Audit, Compliance, and business teams to deliver reliable, compliant, and scalable identity and access management services. Lead the development and optimization of authentication and authorization concepts, ensuring the integrity, availability, and resilience of identity services. Drive operational excellence through automation, proactive monitoring, incident resolution, root cause analysis, and continuous service improvement. Required Qualifications: Extensive hands-on experience with Microsoft Active Directory, Microsoft Entra ID, hybrid identity architectures, and enterprise authentication technologies. Strong expertise in identity protocols and integrations, including SAML, OAuth2, OpenID Connect (OIDC), LDAP, SCIM, and federation services. Deep understanding of identity-centric security principles, Zero Trust Architecture, privileged access management, and cloud security models. Advanced PowerShell scripting and automation skills with the ability to simplify complex operational processes. Strong analytical, problem-solving, and troubleshooting capabilities combined with the ability to communicate effectively with both technical and business stakeholders. Bachelor's or Master's degree in Computer Science, Information Systems, Engineering, or equivalent practical experience; relevant Microsoft certifications are a plus. What we offer: Working alongside global teams and subject matter experts to shape the future of enterprise identity and access management at B. Braun. Leading innovative security initiatives and leveraging modern cloud identity technologies to protect a global workforce. A collaborative environment that values continuous learning, knowledge sharing, and professional development. The opportunity to influence enterprise-wide identity strategies and drive meaningful security improvements across the organization. Taking ownership of challenging, high-impact projects while contributing to a culture of operational excellence and customer-focused service delivery. Apply now Imprint Terms of Use Privacy Policy Cookie Settings Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Copyright © B. Braun SE Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Read our Privacy Policy Imprint Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data center "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off