Title:  Entra Engineer, Identity Management

About Astellas 

Astellas is a global life sciences company committed to turning innovative science into VALUE for patients. We provide transformative therapies in disease areas that include oncology, ophthalmology, urology, immunology and women's health. Through our research and development programs, we are pioneering new healthcare solutions for diseases with high unmet medical need. Learn more at Astellas.com. 

Are you driven to make a real difference in the lives of patients? 

We're seeking passionate individuals who thrive in dynamic environments, embrace new ideas, and aren't afraid to take intelligent risks. People who act with unwavering integrity and are deeply committed to making a tangible impact.

Astellas’ Global Capability Centres - Overview

Astellas’ Global Capability Centres (GCCs) are strategically located sites that give Astellas the ability to access talent across various functions in the value chain and to co-locate core capabilities that are currently dispersed. Our three GCCs are located in India, Poland and Mexico.

The GCCs will enhance our operational efficiency, resilience and innovation potential, enabling a timely response to changing business demands.

Our GCCs are an integral part of Astellas, guided by our shared values and behaviours, and are critical enablers of the company’s strategic priorities, sustainable growth, and commitment to turn innovative science into VALUE for patients.

Working Environment and Location

• GCC POLAND: This is a permanent role based in our Global Capability Centre in Warsaw, Poland and hybrid working with the expectation for some office presence. Flexibility may be required in line with business need. Candidates must be located within a commutable distance of the office
• Astellas’ Responsible Flexibility Guidelines Statement - At Astellas we recognize the importance of work/life balance, and we are proud to offer a hybrid working solution allowing time to connect with colleagues at the office with the flexibility to also work from home. We believe this will optimize the most productive work environment for all employees to succeed and deliver. Hybrid work from certain locations may be permitted in accordance with Astellas’ Responsible Flexibility Guidelines.

Purpose and Scope

• The Microsoft Entra Engineer is responsible for the design, implementation, and administration of Astellas' Microsoft Entra ID platform and related identity services. This role supports enterprise authentication, authorization, conditional access, multifactor authentication, and security initiatives across global business and regulated environments.
• The Entra Engineer partners with Cybersecurity, Infrastructure, Application teams, Service Management, and business stakeholders to ensure secure, compliant, and efficient identity services that enable modern workplace technologies while protecting company assets and data.

Role and Responsibilities

•    Engineer, administer, and support Microsoft Entra ID services across the global enterprise. 
•    Maintain hybrid identity architecture between Active Directory and Microsoft Entra ID. 
•    Monitor platform health, availability, and performance. 
•    Manage tenant configurations, security settings, and identity lifecycle processes.
•    Integrate enterprise applications using: SAML, OIDC, OAuth and SCIM

Continue:Role and Responsibilities

•    Configure and support Single Sign-On solutions
•    Develop automation solutions using: Microsoft Graph, PowerShell and Infrastructure as Code methodologies where applicable
•    Provide Level 3 engineering support for identity-related incidents and problems
•    Participate in major incident response activities
•    Maintain technical documentation, standards, and operational procedures

Essential Qualifications

•    Substantial years of experience supporting enterprise Identity and Access Management solutions.
•    Few years of hands-on experience with Microsoft Entra ID.
•    Strong knowledge of: 
o    Active Directory
o    Microsoft Entra ID
o    Conditional Access
o    Multi-Factor Authentication (MFA)
o    Self-Service Password Reset (SSPR)
o    Identity Governance
o    Privileged Identity Management (Entra PIM)
o    Experience supporting hybrid identity environments.
o    Proficiency with PowerShell scripting and automation.
o    Experience integrating applications using SAML, OAuth, OIDC, and SCIM.
o    Understanding of Zero Trust architecture and IAM security principles.

Preferred Qualifications

•    Microsoft Certified: 
o    Identity and Access Administrator Associate (SC-300)
o    Azure Administrator Associate (AZ-104)
o    Cybersecurity Architect Expert (SC-100)
•    Experience in regulated industries such as pharmaceutical, healthcare, or life sciences. 
•    Knowledge of GxP, SOX, GDPR, and other compliance frameworks. 
•    Experience with ServiceNow integration and IAM workflows. 
•    Familiarity with Identity Governance and Administration (IGA) platforms.

Why Astellas

• Global collaboration: Become part of a connected global business of like-minded life science leaders, all dedicated to improving patients' lives worldwide.
• Real-world patient impact: Contribute to transformative therapies that reach patients around the world, knowing your work makes a difference every day.
  
• Relentless Innovation: Join a company at the forefront of scientific breakthroughs, where you'll have the opportunity to shape the future of healthcare. 
  
• A Culture of Growth: Chart your own course within a supportive environment that values your contributions, champions your development, and empowers you to pursue your passions.

Our Organisational Values and Behaviours

Skills and Capabilities

Benefits

Careers | Astellas

We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.

Beware of recruitment scams impersonating Astellas recruiters or representatives. Authentic communication will only originate from an official Astellas LinkedIn profile or a verified company email address. If you encounter a fake profile or anything suspicious, report it promptly to LinkedIn's support team through LinkedIn Help.

#LI-Hybrid

#LI-Warsaw

#LI-MO1