Associate I, Information Systems Operations Management

Alcon

AD/PKI Operations Engineer Connectivity Security (Science/Tech/Engineering Path)

Key Responsibilities:

Active Directory Operations:

• Manage and maintain multi-domain Active Directory environments across global operations.
• Troubleshoot AD authentication, LDAP, DNS, and replication issues to ensure availability and reliability.
• Administer Group Policies, Organizational Units (OUs), and user/computer objects.
• Support AD Federation Services (ADFS) and integrations using SAML, OAuth, and Azure Entra ID.
• Perform upgrades, migrations, and patching of AD infrastructure in compliance with security standards.
• Monitor AD system health, event logs, and configuration compliance.
• Automate administrative and maintenance tasks using PowerShell scripting.
• Collaborate with IAM teams to implement secure authentication, SSO, MFA, and PAM solutions.
• Familiarity with IAM and security tools such as Saviynt, Secret Server, and Okta is a plus.

PKI Operations:

• Deploy, manage, and maintain Certificate Authorities (CAs), certificate templates, and certificate lifecycle management processes.
• Administer and troubleshoot Active Directory Certificate Services (ADCS), Network Device Enrollment Service (NDES), and Autoenrollment configurations.
• Collaborate with cybersecurity teams to maintain certificate-based security policies and resolve PKI-related incidents.

Security & Compliance:

• Support the monitoring of system security and assist in identifying and mitigating vulnerabilities.
• Ensure alignment of systems and processes with cybersecurity best practices and organizational policies.
• Document operational activities and provide support for security audits and compliance initiatives.
• Continuously expand knowledge of new technologies, security methodologies, and best practices.

Key Requirements / Minimum Qualifications:

• 34 years of hands-on experience in Active Directory and PKI administration within enterprise environments.
• Strong proficiency in PowerShell scripting for automation and operational efficiency.
• In-depth knowledge of Azure Active Directory / Entra ID and hybrid identity management models.
• Understanding of IAM principles, including authentication, authorization, SSO, MFA, and PAM.
• Familiarity with tools such as Saviynt, Thycotic Secret Server, and Okta preferred.
• Strong troubleshooting, analytical, and problem-solving abilities.
• Excellent documentation and collaboration skills with cross-functional IT and security teams.
• Bachelor's degree in Computer Science, Engineering, Information Technology, or related field.