Identity Management Architect

Linde GmbH, Corporate Office

**Identity Management Architect (M/F/d)**

Pullach nearby Munich / Leuna, Germany; Ropice, Czech Republic; Avesta, Sweden; Woking, UK | req16937

**What you will enjoy doing**
- You will plan, support, implement, and design Microsoft Active Directory across the enterprise, includingidentity management solutions as Bravura Security suite or Beyond Trust
- You will also manage the Implementation of Business-driven changes, Configuration of Group Policies, and Integration of AD Management tools/services as Certificate Authorities
- Independently manage and perform engineering lead role for large scale Active Directory and Identity Management projects
- Analysis, design, capacity planning and implementation of Active Directory Security
- You will monitor and enhance secure Active Directory architecture standards (Semperis DSP, PingCastle, BloodHound, ForestDruid)
- Actively lead the creation and updating of standards and reference architectures. These reference architectures will provide direction and guidance on proper compliance with defined corporate standards while ensuring deploying secure infrastructure solutions
- You will be responsible for leading Active Directory infrastructure risk assessments/audits, making decisions on threat modeling and proper security service design and implementation
- Communicate and collaborate with cross-functional peers outside of Center of Excellence, including Second-line Risk and Enterprise Risk Management (SOC)
- Participate in the development of the security roadmap and technology security vision
- You will also act as an advocate for Active Directory security and lead efforts to promote security awareness at all levels of the organizations

**What makes you great**
- You will possess a Bachelor’s Degree in information technology, computer science or closely associated field with at least 7 years of experience in a globally operating company; experience in lieu of degree considered
- You will have a strong understanding of Active Directory Attributes, LDAP Queries, PowerShell Scripting to Modify AD Attributes, Group Policy Analysis and design, familiarity with Applications which integrate with Active Directory
- You must have in depth knowledge of AD Sites
- and Services, Replication Topology, and native AD troubleshooting tools as Microsoft System Center Operations Manager
- Thorough functional understanding and ability to configure Active Directory services as CA, DNS or DFS-R
- You will have strong knowledge of permissions that are granted natively to various Microsoft Built-In Groups to perform Active Directory Administrative Functions, knowledge of native permissions granted when building AD objects
- Active Directory Disaster Recovery (Semperis ADFR) experience
- You must have expert level knowledge about Identity and User access management
- Advanced Windows and Linux operating systems knowledge
- You will also have advanced knowledge in Hypervisor technology as Microsoft Hyper-V
- Understanding of ICS (Industrial Control Systems) is required as iFix, Wonderware or Siemens PCS7
- At least 5 years of Active Directory technical experience that includes the operational support, design, and implementation of large-scale, enterprise level solutions
- Overarching broad and deep technical experience with Active Directory Security
- Extensive experience and advanced knowledge in implementing Windows security concepts and policies, least-privilege design principles
- Familiarity with the NIST cybersecurity framework and the Purdue Mode

**Why you will love working with us**

Linde is a leading global industrial gases and engineering company with 2023 sales of $33 billion. We live our mission of making our world more productive every day by providing high-quality solutions, technologies and services which are making our customers more successful and helping to sustain, decarbonize and protect our planet.

Linde employees learn and abide the Linde Code of Ethics and Code of Conduct by demonstrating honesty, integrity, professionalism in all communications, actions, and decisions.

**What we offer you**

At Linde, the sky is not the limit. If you’re looking to build a career where your work reaches beyond your job description and betters the people with whom you work, the communities we serve, and the world in which we all live, at Linde, your opportunities are limitless. Be Linde. Be Limitless.

In addition to an attractive compensation package, we offer you many social benefits, such as an excellent pension plan, flexible working hours and a wide range of health care options. Furthermore, we support you with various offers to help you combine family and career and to support your professional and personal development. A good infrastructure and our company canteen, which has won several awards, are further benefits.

**Have we inspired you?**

**Your contact person**

Linde GmbH, Corporate Office
Rainer Danne
+49 162 4302132

Linde GmbH, Corp