Technical Expert Active Directory

The Active Directory & Collaboration department is responsible for providing all services connected to authentication and authorization as well as several collaboration tools, mainly focusing on mail and Office 365 services. Within the Active Directory team we are operating several services like Active Directory, Public Key Infrastructure and Domain Name Service, Distributed File Service, Always On VPN, Remote Gateway and Federation Services.

Your tasks and responsibilities:

Operate the Active Directory Forests and Public Key infrastructures needed in Vattenfall Group
Operate the Always On VPN for remote working
Operate Federation Services for Single Sign On for cloud applications
Operate AzureAD and AzureAD Connect
Secure access for privileged accounts or restricted applications based on tiering model by providing Multi Factor Authentication solutions as well as remote desktop gateway service
Design and support improvement of the current landscape and future demands
Responsible for operation of authentication and authorization within different Active Directory Forests
Resolve service incidents and requests according to SLA’s
Participate in on-call service
Participate in Infrastructure and security related projects for Active Directory, Azure

Group tasks:
The Active Directory team takes care for the following services within Vattenfall and also some subsidiaries or external customers:

Operate, maintain and secure on infrastructure level several dedicated Active Directory Forests, including PKI with different CA’s
Operate, maintain and implemented federated authentication (e.g. ADFS) as well as always on VPN
Operate and maintain AzureAD, Conditional Access and AzureAD Connect
Tools to monitor and automate tasks and services based on operational demands
Operating and maintaining secure environment for authentication services within dedicated tiering-mode