Senior Engineer - Active Directory

Job Description
Are You Ready to Make It Happen at Mondelēz International?
Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.
You work with the information security team as a competent and experienced information security and compliance specialist.
How you will contribute
You will assess information security risks in line with internal policy and external best practices, and support security of information and IT assets by testing security systems and applying security standards, policies, and procedures. Under the guidance of global information security lead, you will implement cyber security technology and provide day-to-day business support. If relevant to your role, you will manage third-party providers to ensure that any internal or third-party adhere to standards. You will also provide information security training to appropriate teams.
What you will bring
A desire to drive your future and accelerate your career. You will bring experience and knowledge in:

• Information security, compliance and risk management
• Security solutions and their applicability to Mondelēz International
• Security strategies, awareness campaigns, policies/standards and governance
• Communicating effectively with technical specialists, leaders and peers
• Analytical and problem-solving abilities
• Being a team player by supporting and leading to achieve common goals

Are You Ready to Make It Happen at Mondelēz International?
Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.
You will help lead the daily operations, maintenance, and growth of our Active Directory systems.
How you will contribute
You will work with a mix of both team members and contractors. Responsibilities will include collaborating with the team in delivering a secure solution in a timely manner, that keeps up with current security best practices. You will also be responsible for discovering and deploying enhancements, as well as managing global deployments and changes.
What you will bring
Job Description

• Perform day-to-day Active Directory, Microsoft Entra ID, Certificates operations and task execution.
• Design and maintain Active Directory, Entra ID, and Certificates solutions to provide Directory Services capabilities across various enterprise systems.
• Monitor, identify, and troubleshoot Active Directory, Entra ID related issues to ensure the integrity and availability of the AD/Entra ID Directory services platforms.
• Collaborate with application and IT teams to integrate AD/Entra ID Directory Services with core enterprise applications ensuring secure and user-friendly access.
• Provide technical support for AD/Entra ID services, troubleshooting authentication failures, and resolving access issues across applications and platforms.
• Lead efforts to enhance processes, drive automation, and improve operational efficiency within directory services.
• Help drive continuous quality and process improvement within your area.
• Mentor junior team members, helping train them on new systems and concepts.
• Present security concepts, technologies and improvement plans to broad audience groups.
• Help team members to determine security requirements for business processes and technology systems based upon generally accepted risk analysis methods, functional and performance requirements, information security architecture principles, and market-leading solutions.
• Contribute to compliance-related activities, including creating, tracking, and resolving AD related audit findings.
• Support the team in the creation, tracking, and completion of any compliance findings related to identity and access management.
• Prioritize and balance workload based on severity, deadline, and budget for the team.
• Make risk-based decisions/recommendations when deviations from standards are required, including recommendations on compensating controls.
• Troubleshoot and fix production issues and incidents and participate in problem and change management forums.
• Drive accountability and SLA/OLA adherence with the vendors contracted to provide support.

More about this role
What you need to know about this position:
Skills and Qualifications

• Minimum 5 years knowledge and experience working with and implementing Active Directory, Azure Active Directory/ Microsoft Entra ID, Certificates, and its constituent components.
• Excellent technical thought leadership, hands on experience and management skills on Active Directory, Azure Active Directory/Microsoft Entra ID
• Prefer knowledge, and hands on experience in one or more of the following - Ping SSO/MFA, CyberArk, and Venafi
• Experience in maintaining multi-domain AD environments, including forests and trusts.
• Ability to handle AD replications, domain controllers and schema modifications.
• Experience in implementing and managing group policies (GPOs), to enforce security and compliance standards.
• Experience in managing, and troubleshooting Public Key Infrastructure (PKI), and digital certificates.
• Strong knowledge of systems architecture, server networking principles, and virtualization technologies in both a Microsoft and open-source environment
• In-depth knowledge of Windows domain infrastructure, especially Active Directory, Group Policy, and DNS, including installation, configuration, performance tuning, and troubleshooting
• Knowledge of Zero Trust Security Principles and their implementation in identity and access management.
• Experience in automating IAM workflows using PowerShell or similar scripting tools.
• Familiarity with network protocols such as LDAP, Kerberos, and DNS, and their role in directory services.
• Experience managing IAM in hybrid cloud environments (Azure, AWS).
• Cloud platforms, especially Microsoft Azure, including Azure Active Directory
• Experience of waterfall, Agile and DevSecOps methodologies and ITIL practices
• Excellent communication skills (both written and verbal) with strong presentation and facilitation skills.
• Strong interpersonal skills, customer centric attitude. Can communicate with impact, in a way that is open, honest, consistent, and clear to influence and align stakeholders around a proposed approach.
• Proven team player and team builder used to manage multiple stakeholders in demanding time-critical situations.
• Strong organizational and analytical skills
• Proven ability to work creatively and analytically in a problem-solving environment.
• Ability to work in a fast-paced environment with rapidly changing priorities on multiple projects and initiatives.
• Passionate about areas of expertise, managing your own development by learning continuously from experience and seeking out development opportunities.

Bonus Points

• CISSP
• Microsoft Certifications
• ITIL 4 Foundations Certification

Within Country Relocation support available and for candidates voluntarily moving internationally some minimal support is offered through our Volunteer International Transfer Policy
Business Unit Summary
At Mondelēz International, our purpose is to empower people to snack right by offering the right snack, for the right moment, made the right way. That means delivering a broad range of delicious, high-quality snacks that nourish life's moments, made with sustainable ingredients and packaging that consumers can feel good about.
We have a rich portfolio of strong brands globally and locally including many household names such as Oreo, belVita and LU biscuits; Cadbury Dairy Milk, Milka and Toblerone chocolate; Sour Patch Kids candy and Trident gum. We are proud to hold the top position globally in biscuits, chocolate and candy and the second top position in gum.
Our 80,000 makers and bakers are located in more than 80 countries and we sell our products in over 150 countries around the world. Our people are energized for growth and critical to us living our purpose and values. We are a diverse community that can make things happen-and happen fast.
Mondelēz International is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.
Job Type
Regular
Information Security
Technology & Digital