Senior IAM Expert

About Us

The Digital Identity Product Line is a global team in charge of planning, designing and implementing Identity and Active Directory technologies that are leveraged globally in our environment, but also for the Identity strategy in the cloud.     

The Senior IAM Expert coordinates the Identity transformation of sanofi towards the cloud; Entra ID, Azure, AWS e.g. as well supporting Directory requirements of the on-premises Directory system. S/he must have a very high degree of technical expertise with the architecture of Cloud identity services.  But also, of architecture and operation of Directories (specifically, Active Directory).

The position will work within the group to set near- and long-term technical plans and roadmap for sanofi, maintain the highest level of expertise in current and evolving technologies, and, with support from the Business Partner, maintain relationships throughout sanofi IS (business applications, industrial operations, etc.).

Duties

The primary responsibilities of this expert will be

• Creates the Cloud architecture and leads the Cloud migration activity for Identities

• Creates strategy to move on premise authentication to the cloud

• Lead cloud applications projects from identity and authentication standpoint

• Evolve cloud capabilities to new services

• Evolve the SaaS strategy

• Develop SOPs, tools, proper access controls to allow operational staff to effectively and securely perform specific operational tasks with the minimum level of access.

• Lead Incident resolution for the cloud in coordination with the cloud provider and internal teams

• Participate in the development of the service of directories by architecting secure solutions to ensure high availability as well as providing proactive operational support

• Support the delivery of Directory projects

Skills

• Strong understanding of Identity Access Management solutions

• Understanding and experience in different technology of Azure Active Directory, B2E, B2B and B2C

• Implementation experience in ADFS, Azure AD Connect, Azure AD Application Proxy, Conditional Access Policy, LDAP, Active Directory, Application Integrations for SSO and multi-factor authentication

• Working experience in application integration with header-based, SAML2.0, OIDC, OAuth2.0, WS-Fed protocols

• Experienced in managing external identities and consumers in Azure AD B2B and B2C tenants

• Experience in integrating Azure AD with API management solution

• Understanding of latest technology such as Zero trust framework, Fine-grained authorization, Password less authentication

• Cloud infrastructure deployment and monitoring tools (i.e. PowerShell, Azure -CLI, ARM, Terraform, Azure Monitor, ASR) as well as other performance and management services.

Requirements

• Integrity and strong business ethic

• Rigor in operations and change processes

• Ability to exercise independent judgment and creative problem-solving techniques in a highly complex environment

• Team player comfortable working in international teams and assisting others

• Customer oriented

• Communication skills

• Ability to establish positive relationships

• Ability to take responsibility and accountability for initiatives and decisions

• Project management skills on multiple small to large projects in a large and complex environment.

Education

• 5+ years’ experience in Information System management, design and implementation in a complex IS and organizational environment, preferably with global responsibilities

• Strong cloud experience

• Experience in multi-cultural and multi-national organization and environment.

• Fluent English