Senior Technology Specialist Chapter Lead Directory Services

Kraków, małopolskie
Stała
Pełny etat

7 dni temu

Digital & Technology Team (D&T) is an integral division of HEINEKEN Global Shared Services Center. We are committed to making Heineken the most connected brewery. That includes digitalizing and integrating our processes, ensuring best-in-class technology, and embedding a data-driven culture. By joining us you will work in one of the most dynamic and innovative teams and have a direct impact on building the future of Heineken!Would you like to meet the Team, see our office and much more? Visit our website: Heineken ( )The role of Senior Technology Specialist Chapter Lead Directory Services is a dual-function role combining deep technical expertise in Directory Services with people leadership responsibilities.As part of the Product team, you will refine requirements and support the design, build, and delivery of enterprise-scale Directory Services platforms. This role requires deep expertise in Microsoft Active Directory, Microsoft Entra ID and related technologies to support our organization's digital transformation initiatives and Zero Trust security strategy.The Technology Specialist, part of the Product team, refines requirements and supports the design, build, and delivery of features for Directory Services platforms.Product Teams are structured and empowered by the organization to organize and manage their own work. The resulting synergy optimizes the Product Team's overall efficiency and effectiveness by promoting autonomy and accountability. Additionally, it encourages innovation while implementing necessary governance measures.Your responsibilities would include:

supporting strategic roadmap development for directory services platforms, working with senior leadership to align technical solutions with business objectives and HEINEKEN's digital transformation goals
collaborating in cross-functional teams with Product Owners, Tribe Architects, and business stakeholders to translate requirements into scalable technical solutions
assisting in evaluating and implementing emerging technologies in Directory Services
developing advanced automation solutions using PowerShell, Graph API and other scripting languages to optimize operational efficiency
being responsible for Tier 0 assets
designing hybrid directory solutions connecting on-premises Active Directory with cloud environments
implementing enterprise-grade security frameworks including Conditional Access policies, Multi-Factor Authentication (MFA), and Privileged Identity Management (PIM)
supporting Single Sign-On & Application Integration initiatives, including Entra Application Proxy, Service Principals, and application registrations for global applications
reducing security risks through proactive governance
collaborating with security, infrastructure, and application teams.

Leadership & People Development:leading and developing a team of Engineers providing coaching, mentoring, and career development guidanceestablishing technical standards and ways of working for the Engineering chapter, ensuring consistency and quality across all initiativesfacilitating recruitment and onboarding of new team members, ensuring optimal team composition and skill alignmentconducting performance management including goal setting, regular feedback, and competency development planningfostering knowledge sharing and community building within the chapter and across the broader D&T organization.You are a good match if you have:

Bachelor's degree in computer science, engineering, or related field (or equivalent experience)
8+ years' experience in a similar role within an international environment or FMCG industry
expertise in one or multiple technologies:

Microsoft Active Directory (AD)
Microsoft Entra ID (Azure AD)
Active Directory Domain Services (AD DS)
Azure AD Connect
Microsoft Entra External ID
Microsoft Entra ID Governance
Microsoft Entra Workload ID
Privileged Access Management (PIM)
Conditional Access policies
Multi-Factor Authentication (MFA)
Zero Trust security frameworks
Administrative Units (AUs)
Role-based access control (RBAC)
Single Sign-On (SSO)
Microsoft Entra Application Proxy
Service Principals
Application registrations
SAML (Security Assertion Markup Language)
OAuth 2.0
OpenID Connect
Kerberos
LDAP (Lightweight Directory Access Protocol)
SCIM (System for Cross-domain Identity Management)
Public Key Infrastructure (PKI)
Certificate Authorities (CA)
Certificate Lifecycle Management
Microsoft PKI infrastructure
Certificate-based authentication
Certificate auto-enrollment and renewal
DNS - Network Policy Service (NPS)
API integration and management
excellent written and verbal English
strong communication skills for both technical and non-technical audiences.

You are a perfect match if you also have:

experience working in a deadline-driven environment with rapid release cycles
preferably experienced in Agile environments
familiarity with ITIL, SCRUM, and DevOps - certifications or training are beneficial.

At HEINEKEN Kraków, we take integrity and ethical conduct seriously. If someone has concerns about a possible violation of legal regulations indicated in Polish Whistleblowing Act or our Code of Business Conduct, we encourage them to . Cases can be reported to global team or locally (in line with the local HGSS Whistleblowing procedure) by selecting proper option in this tool or by communicating it on hotline.#LI-HYBRID
We offer:

Heineken

Aplikuj