Sr. IAM (AD) Engineer

Job Description Are You Ready to Make It Happen at Mondelēz International? Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours. You provide software and applications expertise, and be responsible for implementation of the solutions. How you will contribute You will oversee the planning and execution of software and applications. To do so, you will manage an internal team and partner with external suppliers and use your deep technical and market knowledge and thorough understanding of our business goals find and deploy the right software and application solutions for the future. You will support programs to implement regional and global software and application strategies, offer input to financial planning and controls for software and applications on a regional and global level, collaborate with management and follow-up on requisitions, purchase orders, invoices, and payments, explores opportunities to leverage scale and drive savings, and ensure that support service level objectives and key performance indicators are accomplished. What you will bring A desire to drive your future and accelerate your career. You will bring experience and knowledge in: Managing staff and line responsibilities Managing large-scale software and application services Service delivery, support and excellence Program/Project management with experience managing multiple projects for budgets, resources, schedules and quality General technical background Understanding of integration and how different applications talk to each other Process and service orientation Business processes Responsibilities Design, implement, and sustain enterprise-grade Active Directory and Microsoft Entra ID platforms using product and platform engineering principles. Lead the evolution of AD forests, domains, trusts, and domain controller configurations with a focus on stability, scalability, and resilience rather than large-scale migrations. Act as the technical authority during major incidents, providing Level 3 escalation support, deep root-cause analysis, and durable preventive controls. Drive platform reliability and service quality, including SLA/OLA adherence across internal support tiers and external vendors. Forecast platform capacity and infrastructure needs, supporting global expansions, consolidations, and targeted modernization initiatives when required. Design, implement, and govern Conditional Access, Privileged Identity Management (PIM/PAM), Zero Trust controls, and high-risk identity protection policies. Design, operate, and continuously optimize Entra Connect / Azure AD Connect topology, synchronization rules, upgrades, and identity lifecycle flows. Build and maintain PowerShell and Microsoft Graph API automation to enforce standards, reduce manual effort, and improve operational efficiency. Apply product mindset to platform capabilities—defining reusable patterns, technical guardrails, and reference architectures consumed by application and infrastructure teams. Mentor and guide L2 engineers through design reviews, troubleshooting techniques, and operational best practices. Partner with audit, risk, and compliance teams to produce actionable reporting and remediate AD/Entra ID-related findings. Lead Problem Management activities to eliminate recurring production issues and strengthen platform maturity. Prioritize work based on risk, impact, urgency, and cost, balancing operational demands with long‑term platform improvements. Present identity platform health, security posture, and architectural recommendations to technical and business stakeholders. Make risk-based decisions when deviations from standards are required, including defining appropriate compensating controls. Skills and Qualifications 7+ years of experience designing, implementing, and operating Active Directory and Microsoft Entra ID at enterprise scale. Expert knowledge of multi‑domain and multi‑forest environments, trusts, FSMO roles, schema management, and advanced AD operations. Deep expertise in AD, Entra ID, PKI, Conditional Access, PIM/PAM, B2B/B2C, and integrations with platforms such as CyberArk, Ping, and Venafi. Strong understanding of Zero Trust security principles and their practical application within identity and access management. Solid background in systems architecture, networking, and virtualization across Microsoft and mixed‑technology environments. Experience operating within product, platform, or service‑oriented models, emphasizing reliability, scalability, and consumer outcomes. Proven ability to collaborate across engineering, security, infrastructure, and vendor teams in time‑critical environments. Strong analytical, organizational, and documentation skills. Excellent written and verbal communication skills, with the ability to influence stakeholders through clear, data‑driven recommendations. Customer‑centric mindset with the ability to communicate complex technical concepts with clarity and impact. Experience with IAM governance and compliance frameworks (CIS and NIST). Working knowledge of Agile, and DevSecOps methodologies, as well as ITIL practices (Incident, Change, and Problem Management). Demonstrated commitment to continuous learning and professional development. Bonus Points CISSP Microsoft Certifications ITIL 4 Foundations Certification (Incident, Change, and Problem Management) No Relocation support available No Relocation support available Business Unit Summary At Mondelēz International, our purpose is to empower people to snack right by offering the right snack, for the right moment, made the right way. That means delivering a broad range of delicious, high‑quality snacks that nourish life's moments, made with sustainable ingredients and packaging that consumers can feel good about. Our 80,000 makers and bakers are located in more than 80 countries and we sell our products in over 150 countries around the world. Our people are energized for growth and critical to us living our purpose and values. We are a diverse community that can make things happen—and happen fast. Job Type Regular Software & Applications Technology & Digital Equal Opportunity Statement Mondelēz International is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law. Accommodation Statement Applicants who require accommodation to participate in the job application process may contact 847-943-5460 for assistance. #J-18808-Ljbffr