Expert IAM Microsoft / Entra ID Connect / MIM

Project overview

As part of strengthening the cybersecurity and identity management teams of a major banking group, we are looking for an Expert IAM Microsoft – Entra ID / MIM / Active Directory.

You will join a specialized department focused on the administration, evolution, and security of directory and identity management infrastructures, within a large-scale international environment comprising nearly 120,000 users across more than 30 sites.

You will specifically work on identity synchronization infrastructures between On-Premise Active Directory environments and various Microsoft and Google Cloud platforms.

Your mission will combine technical expertise, operational maintenance, infrastructure security, and participation in IAM architecture evolution projects.

Your main responsibilities

Profile sought

With a higher education in IT, infrastructure, or cybersecurity, you have proven experience in the administration and evolution of Microsoft Active Directory environments and hybrid identity management infrastructures.

You have in-depth expertise in Microsoft Entra ID and Entra ID Connect, acquired in complex and large-scale production environments.

You are capable of independently handling advanced technical issues related to identity synchronization, provisioning, and security.

Essential technical skills

Complementary skills appreciated

Expected qualities

Professional English is essential, both written and spoken.

Work environment

You will join a team of directory infrastructure experts within a major international banking group.

The department, composed of 27 employees, is organized around three domains: Active Directory infrastructure, Active Directory compliance, and Cloud identity synchronization.

You will work on critical infrastructures serving nearly 120,000 users in France and internationally.

Technological environment

• Administration and operational maintenance
• Administer and supervise Microsoft Entra ID, Entra ID Connect, and Microsoft Identity Manager (MIM) infrastructures.
• Ensure the operational maintenance of identity synchronization engines.
• Monitor synchronization flows between internal directories and Cloud environments.
• Diagnose and resolve complex incidents related to identities and provisioning.
• Participate in the administration of Google Cloud Directory Sync (GCDS) services.
• Guarantee the availability, reliability, and performance of directory infrastructures.
• Architecture and evolution of IAM infrastructures
• Participate in the evolution of directory and synchronization architectures.
• Contribute to identity service transformation projects.
• Evolve identity provisioning solutions and processes.
• Participate in the integration of new Cloud services.
• Propose technical improvements and automation solutions.
• Security of identity infrastructures
• Contribute to strengthening the security of Active Directory and Cloud environments.
• Participate in technical security audits and gap analysis.
• Implement remediation plans and audit recommendations.
• Utilize results from security analysis tools such as PingCastle.
• Participate in the continuous improvement of identity control and protection mechanisms.
• Automation and industrialization
• Develop and maintain PowerShell scripts.
• Utilize Microsoft Graph API to automate administration and identity management activities.
• Optimize synchronization and provisioning processes.
• Contribute to the industrialization of recurring tasks.
• Documentation and technical expertise
• Write and maintain technical architecture documents.
• Produce installation and configuration procedures.
• Formalize operational documents.
• Maintain technological watch on Microsoft and Cloud IAM solutions.
• Collaborate with infrastructure, cybersecurity, Cloud, and architecture teams.
• Microsoft Entra ID / Azure AD: advanced expertise in administration and cloud identity management.
• Microsoft Entra ID Connect: expertise in hybrid synchronization architectures.
• Microsoft Active Directory: confirmed mastery of directory administration and operation.
• Microsoft Identity Manager (MIM): significant experience with synchronization and provisioning mechanisms.
• Good understanding of hybrid directory architectures and identity flows.
• Ability to diagnose and resolve complex technical incidents.
• Microsoft AD LDS.
• Google Cloud Directory Sync (GCDS).
• PowerShell and Microsoft Graph API.
• Active Directory security and audit tools like PingCastle.
• Microsoft 365 and Google Cloud environments.
• Directory monitoring, audit, and recovery tools.
• Knowledge of identity security and compliance issues.
• High technical autonomy.
• Rigor and service orientation.
• Excellent analytical and problem-solving skills.
• Ability to work on critical infrastructures.
• Team spirit and effective communication.
• Sense of documentation and knowledge transfer.
• Ability to propose improvements and support technological evolutions.
• IAM and directories: Microsoft Active Directory, Microsoft Entra ID, Microsoft Identity Manager, AD LDS.
• Cloud synchronization: Entra ID Connect, Google Cloud Directory Sync.
• Cloud: Microsoft 365, Azure, Google Cloud.
• Security: PingCastle, Active Directory audit, identity security, remediation.
• Automation: PowerShell, Microsoft Graph API.
• Infrastructure: DNS, DFS, directory monitoring and recovery tools.

Project details

Paris 13th.

Language: Professional English mandatory.

This mission offers the opportunity to work on large-scale identity infrastructures and contribute directly to their security and evolution.

• Start: ASAP
• Duration: 1 an renouvelable
• Remote: hybrid
• Location: Paris, Île-de-France, FR
• Languages: French