Directory Services Engineer – Identity & Access Management

About the role

Roche is looking for a Directory Services Engineer to design, implement and support Microsoft Active Directory and related identity solutions for its manufacturing sites. The role combines architecture, operational support and continuous improvement to ensure a reliable, compliant access infrastructure that underpins global healthcare delivery.

Key responsibilities

• Design and deploy end‑to‑end directory services infrastructure, primarily Microsoft Active Directory, for manufacturing environments.
• Provide tier‑2/3 operational support, incident resolution and change implementation while maintaining high customer satisfaction.
• Monitor performance, availability and capacity, and proactively address issues to minimise escalations.
• Conduct proofs of concept and feasibility studies for new technologies and solutions.
• Apply ITIL, GxP and project‑management processes for request, incident, change, problem and documentation management.
• Participate in 24 × 7 on‑call rotation and occasional international travel.

Required profile

• Bachelor’s degree in Computer Science, Engineering or related field, or equivalent experience.
• Minimum 4 years of hands‑on Active Directory administration and troubleshooting.
• Experience working in a large, regulated, global organisation.
• Strong communication skills across multiple countries and cultures.

Required skills

• Microsoft Active Directory
• Lightweight Directory Services (LDAP)
• Entra ID (desired)
• PowerShell scripting