Senior Specialist Directory Services Operations

Job Description

Senior member of DS Operation working as part of a global team to support a fast-paced environment. Ensure conformance to established system architecture, security, regulations, standards and practices, and participate\drive their creation and upkeep. In addition to technical expertise must be proficient in managing projects through to completion, innovative, security focused, self-motivated and driven.  The candidate will be a member of the global Tier 2 Directory Services Operations team which includes operational responsibilities across all supported LDAP compliant directory environments and core services within the organization.  Good communication skills, documentation abilities and compliance experience required. Comfortable working in a team environment and able to work collaboratively with other areas in implementing solutions that secure and benefit the company. Additional technical requirements follow:

Primary job responsibilities include:

• Day to Day operation supporting multiple Active Directory forests\domains with various implementations across enterprise. Experience securing, hardening and implementing tiered concepts is required.
• Drive improvement, quality and value.
• Provided troubleshooting and root cause analysis for Active Directory-related issues, including replication failures, authentication issues, and policy conflicts
• Manage Group Policy Objects (GPOs) to enforce company-wide policies for user authentication, access control, and security.
• Oversee Active Directory security configurations, including user/group management, delegated administration, and role-based access control (RBAC).
• Ensure the availability, stability, and performance of the Active Directory infrastructure through proactive monitoring, troubleshooting, and issue resolution.
• Advanced knowledge of cloud capabilities\concepts including federation, RBAC and cloud security, Directory Synchronization (AAD Connect), Microsoft O365 and Azure AD.
• Excellent understanding and technical knowledge regarding core services including IPSEC, DNS, WINS, PKI, GPOs, replication, trusts, etc.
• Authentication services especially Kerberos and LDAP authentication protocols.
• Compliance and IT Security related best practices and processes
• Plan, configure, troubleshoot and administer Microsoft AD and underlying Operating System(s).
• PowerShell scripting experience in a large-scale environment for automation purposes and cloud connectivity.
• Experience with Quest support tools specifically Active Roles.
• Familiarity with old and modern Microsoft operating systems, server class hardware and VMWare technologies.
• Enterprise Directory experience a must.
• Experience with identity best practices, Azure roles, security, and SAAS strategies specifically around Microsoft Active Directory\Entra ID a must.
• Least privileged access concepts necessary

Optional Skills:

• Experience with Oracle products including Oracle Unified Directory (OUD) similar directory products
• RedHat Linux experience and support technical expertise
• Advanced knowledge of large networks including F5 load balancers concepts

We are seeking professionals with the following qualifications, skills and experience:

Education Minimum Requirement: 

• MSc Degree or BSc Degree or equivalent with relevant experience in Computer Science, Computer Science Engineering, or equivalent experience.

Required Experience and Skills:

• 7+ years of experience supporting large scale enterprise Active Directory environments and related services.
• Managing permissions and all other aspects of AD administration.   
• Ability to provide support for Real-time events providing moderated services.
• Ability to acquire new skills in a diverse environment.
• Fluent in English, in both verbal and written communication.

Current Employees apply HERE

Current Contingent Workers apply HERE

Search Firm Representatives Please Read Carefully 
Merck & Co., Inc., Rahway, NJ, USA, also known as Merck Sharp & Dohme LLC, Rahway, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company.  No fee will be paid in the event a candidate is hired by our