Sr. IAM (AD) Engineer

Job Description
Are You Ready to Make It Happen at Mondelēz International?
Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.
You provide software and applications expertise, and be responsible for implementation of the solutions.
How you will contribute
You will oversee the planning and execution of software and applications. To do so, you will manage an internal team and partner with external suppliers and use your deep technical and market knowledge and thorough understanding of our business goals find and deploy the right software and application solutions for the future. You will support programs to implement regional and global software and application strategies, offer input to financial planning and controls for software and applications on a regional and global level, collaborate with management and follow-up on requisitions, purchase orders, invoices, and payments, explores opportunities to leverage scale and drive savings, and ensure that support service level objectives and key performance indicators are accomplished.
What you will bring
A desire to drive your future and accelerate your career. You will bring experience and knowledge in :

• Managing staff and line responsibilities
• Managing large-scale software and application services
• Service delivery, support and excellence
• Program/Project management with experience managing multiple projects for budgets, resources, schedules and quality
• General technical background
• Understanding of integration and how different applications talk to each other
• Process and service orientation
• Business processes

Are You Ready to Make It Happen at Mondelēz International?
Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.
Serve as the subject matter expert (SME) for Active Directory and Microsoft Entra ID, providing deep technical leadership across design, operations, and continuous improvement of enterprise identity platforms. This role focuses on the long-term health, resilience, and security posture of AD and Entra ID by applying product- and platform-principles-treating identity as a scalable, reliable service that delivers consistent value to the business. You will design, optimize, and sustain global AD/Entra ID platforms, lead response to complex identity incidents, and drive modernization through automation, standardization, and Zero Trust alignment-while ensuring operational stability.
How you will contribute
You will collaborate with internal engineers, architects, and strategic partners to deliver secure, reliable IAM capabilities at enterprise scale. Operating within a product & platform model, you will help define technical standards, roadmaps, and reusable capabilities that improve service quality, reduce operational risk, and enable downstream applications and business teams.
You will continuously identify opportunities to enhance the AD/Entra ID platforms through automation, design optimization, and process improvement, while supporting global deployments, changes, and incident response in alignment with security best practices and compliance requirements.
What you will bring
Job Description

• Design, implement, and sustain enterprise-grade Active Directory and Microsoft Entra ID platforms using product and platform engineering principles.
• Lead the evolution of AD forests, domains, trusts, and domain controller configurations with a focus on stability, scalability, and resilience rather than large-scale migrations.
• Act as the technical authority during major incidents, providing Level 3 escalation support, deep root-cause analysis, and durable preventive controls.
• Drive platform reliability and service quality, including SLA/OLA adherence across internal support tiers and external vendors.
• Forecast platform capacity and infrastructure needs, supporting global expansions, consolidations, and targeted modernization initiatives when required.
• Design, implement, and govern Conditional Access, Privileged Identity Management (PIM/PAM), Zero Trust controls, and high-risk identity protection policies.
• Design, operate, and continuously optimize Entra Connect / Azure AD Connect topology, synchronization rules, upgrades, and identity lifecycle flows.
• Build and maintain PowerShell and Microsoft Graph API automation to enforce standards, reduce manual effort, and improve operational efficiency.
• Apply product mindset to platform capabilities-defining reusable patterns, technical guardrails, and reference architectures consumed by application and infrastructure teams.
• Mentor and guide L2 engineers through design reviews, troubleshooting techniques, and operational best practices.
• Partner with audit, risk, and compliance teams to produce actionable reporting and remediate AD/Entra ID-related findings.
• Lead Problem Management activities to eliminate recurring production issues and strengthen platform maturity.
• Prioritize work based on risk, impact, urgency, and cost, balancing operational demands with long-term platform improvements.
• Present identity platform health, security posture, and architectural recommendations to technical and business stakeholders.
• Make risk-based decisions when deviations from standards are required, including defining appropriate compensating controls.

More about this role
What you need to know about this position:
Skills and Qualifications

• 7+ years of experience designing, implementing, and operating Active Directory and Microsoft Entra ID at enterprise scale.
• Expert knowledge of multi-domain and multi-forest environments, trusts, FSMO roles, schema management, and advanced AD operations.
• Deep expertise in AD, Entra ID, PKI, Conditional Access, PIM/PAM, B2B/B2C, and integrations with platforms such as CyberArk, Ping, and Venafi.
• Strong understanding of Zero Trust security principles and their practical application within identity and access management.
• Solid background in systems architecture, networking, and virtualization across Microsoft and mixed-technology environments.
• Experience operating within product, platform, or service-oriented models, emphasizing reliability, scalability, and consumer outcomes.
• Proven ability to collaborate across engineering, security, infrastructure, and vendor teams in time-critical environments.
• Strong analytical, organizational, and documentation skills.
• Excellent written and verbal communication skills, with the ability to influence stakeholders through clear, data-driven recommendations.
• Customer-centric mindset with the ability to communicate complex technical concepts with clarity and impact.
• Experience with IAM governance and compliance frameworks (CIS, and NIST).
• Working knowledge of Agile, and DevSecOps methodologies, as well as ITIL practices (Incident, Change, and Problem Management).
• Demonstrated commitment to continuous learning and professional development.

Bonus Points

• CISSP
• Microsoft Certifications
• ITIL 4 Foundations Certification (Incident, Change, and Problem Management)

No Relocation support available
Business Unit Summary
At Mondelēz International, our purpose is to empower people to snack right by offering the right snack, for the right moment, made the right way. That means delivering a broad range of delicious, high-quality snacks that nourish life's moments, made with sustainable ingredients and packaging that consumers can feel good about.
We have a rich portfolio of strong brands globally and locally including many household names such as Oreo, belVita and LU biscuits; Cadbury Dairy Milk, Milka and Toblerone chocolate; Sour Patch Kids candy and Trident gum. We are proud to hold the top position globally in biscuits, chocolate and candy and the second top position in gum.
Our 80,000 makers and bakers are located in more than 80 countries and we sell our products in over 150 countries around the world. Our people are energized for growth and critical to us living our purpose and values. We are a diverse community that can make things happen-and happen fast.
Mondelēz International is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.
Job Type
Regular
Software & Applications
Technology & Digital