Lead – Active Directory Services
Location – Hyderabad
Role Purpose / Summary
The Lead for Active Directory (AD) Services will be accountable for driving the design, operation, and strategic roadmap of Active Directory (AD) and Azure Active Directory (Azure AD) across Lonza’s global enterprise environment. This role ensures the stability, security, and scalability of directory services while serving as a technical authority and escalation point for complex issues. The Lead will guide engineering teams, manage relationships with managed services, and work with cybersecurity, IT operations, and business stakeholders to deliver robust identity services aligned with compliance, security, and business objectives.
Key Accountabilities
Strategic Leadership
- Define and own the global AD and Azure AD services strategy, ensuring alignment with IAM and overall IT security objectives.
- Act as subject matter expert and escalation point for complex technical and operational directory service challenges.
Design and Implementation of Directory Services
- Lead the architectural design, deployment, and management of Active Directory (AD) and Azure Active Directory (Azure AD) environments, ensuring they are secure, scalable, and optimized for performance.
- Develop and implement policies for directory services that align with organizational security and compliance requirements, including GDPR and HIPAA.
Collaboration with IAM Teams
- Work closely with other IAM teams responsible for Identity Lifecycle, Privileged Access Management, Certificate Services, Application Lifecycle, Authentication, and Authorization to ensure seamless integration and consistent application of security policies across all identity-related areas.
Integration and Automation
- Develop and implement automation scripts and tools to streamline directory management tasks, domain provisioning, and standardization in the OU structure and site provisioning & deprovisioning.
- Ensure seamless integration between AD, Azure AD, and other IAM tools, enabling a unified identity and access management platform.
Operational Excellence
- Oversee directory services operations managed by internal and external partners.
- Ensure high availability, disaster recovery readiness, and performance optimization of directory services.
Security and Compliance
- Enforce and maintain strict security standards within directory services, ensuring that only authorized users have access to critical systems and data.
- Monitor and audit directory services for compliance with internal and external regulations, identifying and mitigating any security risks.
Directory Services Optimization
- Continuously evaluate and optimize the performance of directory services, implementing updates and patches as necessary.
- Lead efforts to migrate or upgrade directory services, ensuring minimal disruption to business operations.
Support and Collaboration with Managed Services
- Work closely with the IAM Managed Service team, providing them with technical guidance and support for the operational management of AD and Azure AD.
- Act as an escalation point for complex directory services issues that cannot be resolved by the Managed Service team.
Documentation and Training
- Create and maintain comprehensive documentation for directory services architecture, processes, and policies.
- Provide training and knowledge transfer to the IAM Managed Service team and other relevant stakeholders.
Key Requirements
Technical Expertise in Directory Services
- Extensive hands-on experience with Active Directory (AD) and Azure Active Directory (Azure AD) administration, including designing, deploying, and managing these environments in large-scale, global organizations.
- Proficiency in configuring and managing Group Policies, DNS, DHCP, and other AD-related services.
IAM Knowledge
- Strong understanding of Identity and Access Management concepts, particularly in relation to directory services, authentication, authorization, and identity lifecycle management.
- Familiarity with other IAM domains such as Privileged Access Management (PAM), Certificate Services, and SSO/MFA solutions.
Security and Compliance Acumen
- In-depth knowledge of security best practices related to directory services, including access controls, password policies, and audit logging.
- Experience ensuring compliance with industry regulations such as GDPR, HIPAA, and other relevant standards.
Scripting and Automation Skills
- Proficiency in scripting languages such as PowerShell, Python, or similar, to automate directory management tasks and integrate with other IAM tools.
Problem-Solving and Troubleshooting
- Strong analytical skills with the ability to diagnose and resolve complex issues related to directory services.
- Experience acting as an escalation point for directory services-related issues.
Collaboration and Communication
- Ability to collaborate effectively with cross-functional teams, including cybersecurity, IT operations, and business units, to achieve shared goals.
- Strong communication skills, with the ability to document and explain technical concepts to both technical and non-technical audiences.
Continuous Learning and Adaptability
- Commitment to staying current with the latest developments in directory services, IAM technologies, and security practices.
- Ability to adapt to new technologies and methodologies as the IAM landscape evolves.
About Lonza
At Lonza, our people are our greatest strength. With more than 30 sites across five continents, our globally connected teams work together every day to manufacture the medicines of tomorrow. Our core values—Collaboration, Accountability, Excellence, Passion, and Integrity—reflect who we are and how we work together. Everyone’s ideas, big or small, have the potential to improve millions of lives. Innovation thrives when people from all backgrounds bring their unique perspectives to the table. Lonza is committed to creating an inclusive environment for all employees.