Technical Specialist - Active Directory and Security Olympus Medical Products Portugal (OMPP) | Corporate (x)Olympus Medical Products Portugal is a subsidiary of the Olympus Group. Its core business is the repair of optical and digital equipment's of the brand, offering to Olympus customers repair services that meet highest demands in terms of speed, approachability, reliability and consistency.Your responsibilitiesResponsible for managing day to day service operations of global on-prem Active Directory and Entra ID.Manage incidents, requests, problems, and changes according to ITIL best practices.Responsible for timely and effective resolution of incidents and fulfilment of service requests.Responsible to ensure that all Service and Process documents, including handbooks, SOPs, and knowledge base articles, are maintained in an accessible and up‐to‐date manner.Take responsibility during major incidents, escalations, or urgent business needs to restore stable operations.Diagnose complex incidents, lead root cause analysis, implement corrective actions, and coordinate with global teams and partners.Manage operating partner, ensuring contracted deliverables are monitored, delivered, reviewed, and updated in collaboration with provider management.Monitor and report on OLA, SLA, and KPIs, and address issues before they impact business operations.Responsible to track, and plan service costs to comply with budget and financial regulations; define and manage accurate allocation keys; collaborate with the Service Owner and finance teams to ensure consistent costs and regular reporting.Drive continual improvement of services by proactively identifying service gaps, implementing efficiency initiatives, and championing automation and process optimisation as part of ongoing service enhancement responsibilities.Responsible to ensure relevant IT services meet security and regulatory requirements.Responsible to manage risks related to service continuity and availability.Responsible for resolving vulnerabilities in AD and Entra ID, while ensuring that all procedures adhere to regulatory compliance standards.Serve as a subject matter expert offering comprehensive expertise and technical support.Stay current with technologies, trends, and best practices in Directory Service Operations.Responsible to identify improvement opportunities and lead the development, maintenance, and execution of the Directory & Identity Services Roadmap.Expertise in Active Directory architecture, Microsoft Entra ID and hybrid identity solutions, including secure authentication, federation services, privileged access management, and SSO.Strong knowledge of role‐based access control, identity protection, and automated user provisioning and de‐provisioning.Experience managing Active Directory Certificate Services, PKI hierarchy, and certificate lifecycle.Advanced understanding of security hardening, tiered Administration, enterprise access model and compliance frameworks, including Zero Trust.Experience with Entra AD Connect, identity synchronization, and cloud identity governance.Knowledge of ITIL service management processes (Incident, Request, Problem, Change Management).Proven ability to lead complex projects, such as migrations, upgrades, and integrations.Skilled in managing third‐party vendors and internal stakeholders.Bachelor's degree in Computer Science, Information Technology, or a related field.5+ years of hands‐on experience managing Active Directory environments.5+ years working with Microsoft Entra ID and hybrid identity solutions.Demonstrated experience working within Microsoft Tiered Administration & Enterprise Access Model.Experience in ITIL‐based service management and operational support.Experience managing Global IT Services and working with global service providers.Experience delivering complex global infrastructure projects in a multinational environment.Experience supporting manufacturing, R&D, or production facility environments.Strong knowledge of:Active Directory architecture (domains, forests, trusts, GPOs).Microsoft Entra ID features (Conditional Access, MFA, Identity Governance).Azure AD Connect and hybrid identity synchronization.Proficiency in PowerShell scripting for automation.Understanding of authentication protocols (Kerberos, SAML, OAuth, OpenID Connect).Familiarity with security best practices, hardening and compliance frameworks.Interview Assessment CompetenciesBuild for the FutureDeliver ResultsLead PeopleLead SelfModel and champion Our Core ValuesCompensationCompetitive SalaryPermanent employment contractWell Being in FocusHealth InsuranceVacation Policy (24 vacation days, with additional days off for your birthday and December 24th)Free Curative Medicine24/7 Employee Assistance Program (EAP)Nutritional Options at Work (canteen with diverse meal choices including meat, fish, diet, vegetarian, and composed salads)Culture of Development and LearningUnlimited Access to LinkedIn LearningInitial and continuous training aligned with your career goals.Other BenefitsReferral ProgramEngaging Events (Team buildings, holidays celebrations, and themed days)On‐site parking (for cars, motorcycles, and bikes, including electric car chargers)#J-18808-Ljbffr