identity and access management it architect m/f

JOB DESCRIPTION: JOB SPECIFICATION: A new position for an IT Architect for Identity and Access Management has arisen in Airbus DS in France (Toulouse or Elancourt), you will reinforce the TZITT-TL6 department. You will design and implement Identity and Access Management Solutions as part of a trans-national team, with special focus on the French perimeter of Airbus Defence and Space. ABOUT US: What is exciting about our team? What makes the difference? What great challenges do we work on? The key objectives of the IAM role are to analyse, design and implement the technical requirements of IAM projects, which include Active Directory, Identity Federation (e.g. SAML, SSO, ADFS, PingFederate), Access and Identity Management. The position includes planning, requirements gathering, specification, design and the implementation of global IAM solutions, and the documentation and transition of operational processes required to support these complex technical solutions. THIS POSITION WILL REQUIRE A SECURITY CLEARANCE OR WILL REQUIRE BEING ELIGIBLE FOR CLEARANCE BY THE RECOGNIZED AUTHORITIES. WHAT WILL YOU MANAGE? The main tasks and responsibilities will include: DESIGN AND IMPLEMENT: * Identity and Access Management Solutions for a large multinational organisation. * Identity models, management processes and architecture of solutions (including the hardware and software infrastructure). * Methods for authentication, access control and single sign-on for Web and Desktop applications, both in Single/Multi Forest/Domain and Federated Environments. * Centralised Identity directory technologies (eg LDAP, AD LDS) and Identity Management products (eg MIM). * Produce and maintain processes, procedures, operational and architectural documentation. PROJECT SUPPORT * Describing technical and functional requirements in projects of Identity and Access Management. * Analysing technical and functional requirements. * Developing integration and acceptance testing plans. * Provide expert opinion regarding customer needs, based on previous experience in implementation of projects and products from different manufacturers. ABOUT YOU: We are looking for a candidate with the following required skills and experience: * Minimum 5 YEARS OF EXPERIENCE with supporting various authentication protocols (Kerberos, SAML, OAUTH, etc.). * STRONG KNOWLEDGE of Federation standards (SAML, OpenID Connect, OAuth, WS-Fed) and Provisioning standards (SPML, SCIM). * STRONG KNOWLEDGE in authentication & authorisation infrastructures, * STRONG KNOWLEDGE OF FEDERATED IDENTITY SERVICES (PingIdentity / ADFS), MIM and Lightweight Directory Access Protocol (LDAP) * Knowledge of Active Directory; including design, configuration, and deployment. * Knowledge in other areas within Information Security (standards, regulations, SIEM, perimeter and technical security, trade security solutions, public key infrastructure, etc.). * Knowledge of Multi Factor Authentication technologies * Knowledge of Microsoft AD Integration with IdaaS solutions (eg Azure, AWS, OneLogin). * A certification would be a plus : MICROSOFT, CISSP, CISA, CISM, ITIL. DID YOU READ TO THE END AND ARE STILL INTERESTED? so apply and let's exchange! This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth. COMPANY: Airbus Defence and Space SAS CONTRACT TYPE: Permanent Contract / CDI / Unbefristet / Contrato indefinido EXPERIENCE LEVEL: Professional / Expérimenté(e) / Professionell / Profesional JOB FAMILY: Information Mgmt and Digital Technology By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus. Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief. Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to emsom@airbus.com . At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.