Manufacturing Directory Services – Identity & Access Management Engineer

About the role

Roche is seeking an experienced professional to design, implement, and support Directory Services solutions for its manufacturing environment. The role focuses on Microsoft Active Directory and related technologies, ensuring reliable identity and access management across global operations.

Key responsibilities

• Collaborate with technical teams to design end‑to‑end infrastructure solutions and produce comprehensive documentation.
• Evaluate new technologies through proofs of concept and feasibility studies.
• Provide Tier 2‑3 operational support for on‑premises Directory Services, including monitoring performance, availability, and capacity.
• Respond to customer requests, resolve incidents, and implement changes while maintaining high satisfaction.
• Apply ITIL, GxP, and project‑management processes for request, incident, change, problem, and document management, including qualification and validation.
• Participate in 24 × 7 on‑call rotation, create improvement plans, and travel internationally as needed.

Required profile

• Bachelor’s degree in Computer Science, Engineering or related field, or equivalent experience.
• At least 4 years of hands‑on Microsoft Active Directory administration and advanced troubleshooting.
• Experience working in a large, regulated, global organization with strong interpersonal skills across cultures.
• Proficiency in PowerShell scripting and a solid understanding of LDAP and Entra ID concepts.

Required skills

• Microsoft Active Directory
• Lightweight Directory Services (LDAP)
• Entra ID (desirable)
• PowerShell scripting
• ITIL framework
• GxP compliance knowledge

What we offer

• Opportunity to contribute to global healthcare innovation.
• Collaborative, inclusive culture that values diversity.
• Continuous learning and professional development.