Senior IAM Specialist

About the job and your team

•    The IAM team is responsible for the global directory services for Enterprise IT (EIT). The team is also involved in several of the Industrial Control Environments (ICS) within Operational IT (OIT) with similar areas of responsibility.
•    Hydro have recently finalized a new IAM strategy, and the team will play a key role in operationalizing this which will include implementation of additional IAM / IGA tooling. A reshaping of the IAM area is to be expected over the next few years where the emphasis will shift from legacy on-premises infrastructure to cloud technologies.

You will work on

•    Development of Active Directory and MS Entra ID Directory solutions within projects and operations.
•    Analyse and resolve Directory Services issues (including both on-premises and cloud).
•    Support the implementation and maintenance of IAM controls and toolsets.
•    Ensure stable global operations of the Hydro enterprise domain.
•    Ensure stable operations of Hydro ICS domains.
•    Take part in maintaining and developing the IAM automations and automation environment.
•    Ensure to work in compliance with Hydro Quality system, HSE regulations, policies and standardized operating procedures. 
•    Perform all other tasks upon the instructions of the superior in charge which may be necessitated by the operations of the related unit and which do not conflict with any applicable laws, statutory provisions and company rules. 
•    Compliance with area-specific customer requirements.
•    Take part in the 24/7/365 on call duty service operated by the team.
•    Take part in projects.
•    Achieved level of subject matter expert with architect level capabilities within one or more of the core areas of the IAM scope.

What we offer you

•    Working at the world’s only fully integrated aluminum and leading renewable energy company
•    Diverse, global teams
•    Flexible work environment/home office
•    We provide you the freedom to be creative and to learn from experts
•    Possibility to grow with the company, gain new certificates
•    Attractive benefit package

Your qualifications and skills

•    At least 5 years of work experience within the area of core infrastructure, directory services and / or IAM / IGA.
•    At least 5 years of technical working experience with Microsoft Infrastructure operations and IAM area. Preferably within an international environment.
•    Experience with Windows Server and Active Directory Domain Services.
•    Experience with MS Entra ID as identity provider and synchronization with on premise infrastructure.
•    Experience with IAM services Primary/Secondary controls, operations, and maintenance.
•    Experience infrastructure-oriented programming and automation within a Microsoft environment using PowerShell and possibly with script-based automation frameworks.
•    Experience with one or more of the major IAM / IGA offerings (e.g., Omada, Okta, Sailpoint, Saviynt, OneIdentity, Ping, etc.) would be a plus, but not a prerequisite.
•    Experience with practical ITSM / ITIL tools and processes.
•    Minimum 3-year relevant higher education or university degree (bachelor).
•    Preferably Certified on core Microsoft technologies relevant for the area of work.
•    Knowledge of identity services and concepts, RBAC, PIM/PAM, MFA, SSO & related standards (e.g. SAML, OAUTH, NTLM, LDAP, Kerberos, PKI, SCIM etc.).
•    Strong written and verbal communication skills in English
•    Ability and experience working together with external service providers
•    Motivated, forward thinker and willing to learn
•    Ability to work in a global team setup and to cooperate with internal and external stakeholders, technical and business leadership and with supporting teams.
•    Have plastic capabilities and understand and accept that our areas of work and responsibilities will be in a continuous reshaping and that flexibility and resilience are core personal characteristics needed in such a setting.