Senior Specialist - Systems Administration at Marsh &… · Cluj-Napo…

Senior Specialist - Systems Administration Location: Cluj-Napoca - Decembrie Company: Marsh Description: We're excited to find a talented individual eager to make a meaningful impact and flourish in our dynamic and innovative environment! Your journey to success starts here at Marsh Risk —come join us and be part of something amazing! Join our team as a Senior Specialist in Identity & Access Management (IAM) and play a pivotal role in managing and enhancing our operational platforms. You will collaborate with Engineering and Security teams to support and deliver best in class solutions. We will count on you to: Manage our Active Directory on-premise infrastructure environment, domain controller build and replication, sites and services, schema and attributes, backup and restore objects. Work closely with Entra AD, manage the onboarding process for internal and external applications for SSO & MFA, ensuring secure authentication setups and seamless integration. Azure AD connect for synchronization Collaborate with engineering and security teams to prioritize feature enhancements, bug fixes, and security improvements. Provide technical guidance on identity management, authentication protocols (SAML, OAuth, OpenID Connect), and security policies. PowerShell and or another scripting language Any IGA services e.g. SailPoint Management of enterprise PAM solution. E.g. CyberArk, Delinea, Beyond Trust What you need to have: 3+ years of experience in IAM, or a related field, with a strong focus on Active Directory and IGA within a large enterprise. Hands-on experience with Single Sign-On and multi-factor authentication solutions such as OKTA, Entra and Ping Federate. Strong knowledge of authentication and authorization protocols (SAML, OAuth 2.0, OpenID Connect). Excellent communication and stakeholder management skills, with the ability to collaborate across business and technical teams. What makes you stand out: Experience with enterprise-scale IAM deployments and managing customer identity solutions. Knowledge of risk-based authentication, adaptive authentication, and identity governance. Previous experience in a Technical Product Manager role within security or IAM. Familiarity with compliance standards (SOC 2, GDPR, HIPAA) related to identity security. A proactive mindset with a continuous improvement approach to IAM solutions. Why join our team: We help you be your best through professional development opportunities, interesting work, and supportive leaders. We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have an impact for colleagues, clients, and communities. Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well-being. Marsh (NYSE: MRSH) is a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $27 billion and more than 95,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information, visit corporate.marsh.com, or follow us on LinkedIn and X. Marsh is committed to creating a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age, background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law. Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one “anchor day” per week on which their full team will be together in person.