pSelect how often (in days) to receive an alert: /ph3Global IT Enterprise Core Services /h3pAlfasigma is a privately held global healthcare company founded over 75 years ago in Italy, where it remains headquartered today in Bologna and Milan. The Group operates in over 100 markets spanning Europe, North and South America, Asia, and Africa. /ppOver three years ago, we embarked on a transformative journey to become ba truly global innovative healthcare company with a leading focus on Gastrointestinal (GI) health /b. We have experienced remarkable growth, nearly doubled our revenues, expanding geographically, and integrating several key acquisitions. We have also evolved our portfolio, expanded into rare and specialty segments, and strengthened our pipeline and people's capabilities. /ppbBut our journey is far from complete! /bIn fact, this is just the beginning of a bold new chapter in Alfasigma's history. We are committed to advancing innovation and leveraging our deep expertise to provide better health and a better quality of life for patients and consumers worldwide and expand our reach across diverse markets. /ppAs we continue to grow, we are seeking an individual for our Global IT Enterprise Core Services team. This position can be located in either Pomezia, Alanno, Milan, or Bologna. /ppbScope of the role: /b /ppThis individual will be responsible for the management, evolution and security of the enterprise core services that underpin the digital workplace: identity and access management, authentication, directory services and collaboration platforms. The role guarantees the reliability, security and compliance of these foundational services across the organization in a regulated (GxP/GMP) environment, acting as the technical reference point for identity governance and Microsoft 365 collaboration services. The resource is also expected to manage the full lifecycle of the systems under their responsibility and to operate confidently across hybrid on-premises and cloud infrastructures. /ppbYour key responsibilities: /b /pulliAdminister and evolve identity platforms (Active Directory, Microsoft Entra ID / Azure AD), including hybrid identity and directory synchronization. /liliManage authentication services: Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access and federation (SAML, OAuth, OIDC). /liliDesign and operate Identity Access Management (IAM) processes: provisioning/de-provisioning, role-based access, access reviews and privileged access management (PAM). /liliManage and support enterprise collaboration platforms (Microsoft 365 — Exchange Online, Teams, SharePoint,



OneDrive). /liliDefine and enforce identity and access policies aligned with security and compliance requirements. /liliSupport integration of applications and services with the corporate identity platform. /liliManage endpoint identity and security integration (Intune/MDM, conditional access, device compliance) in coordination with the Workplace team. /liliManage the full lifecycle of the core-service systems (provisioning, configuration, patching, upgrades, capacity management and secure decommissioning). /liliMonitor core services health, availability and security; manage incidents and root-cause analysis. /liliContribute to Disaster Recovery and Business Continuity for identity and collaboration services. /liliMaintain technical and validation documentation in line with GxP/GMP requirements. /liliCoordinate with vendors and system integrators. /liliSupport modernization and security initiatives (Zero Trust, identity governance, lifecycle automation). /li /ulpbWho are you: /b /ph3bTechnical requirements /b /h3ulliStrong hands-on experience with Active Directory (DNS, DHCP, GPO, sites services) and Microsoft Entra ID / Azure AD. /liliDesign experience preferred, please highlight. /liliSolid experience with authentication and federation technologies (SSO, MFA, Conditional Access, SAML, OAuth, OIDC, ADFS). /liliExperience with IAM / identity lifecycle and access governance. /liliExperience administering Microsoft 365 collaboration services (Exchange Online, Teams, SharePoint, OneDrive). /liliSolid knowledge of server virtualization on both Microsoft Hyper-V and VMware vSphere/ESXi (vCenter, clustering, HA/DR). /liliExperience with hyperconverged infrastructure (HCI) platforms (VMware vSAN, Nutanix, Azure Stack HCI / Azure Local). /liliWorking knowledge of Microsoft Azure and hybrid-cloud services (Azure Arc, hybrid identity, hybrid connectivity). /liliAbility to manage the end-to-end lifecycle of systems and infrastructure (deployment, patching, upgrades, capacity and decommissioning). /liliKnowledge of endpoint management and identity-driven security (Intune/MDM, Microsoft Defender for Endpoint) considered a plus. /liliScripting and automation skills (PowerShell, Microsoft Graph)



for identity lifecycle and reporting. /liliUnderstanding of security best practices (least privilege, PAM, Zero Trust principles). /li /ulh3bRequired / preferred certifications /b /h3ullibRequired: /bMicrosoft SC-300 (Identity and Access Administrator) or MS-102 (Microsoft 365 Administrator). /lilibStrongly preferred: /bMicrosoft AZ-104 (Azure Administrator) and/or SC-900 (Security, Compliance Identity Fundamentals). /lilibValued as a plus: /bMicrosoft MS-700 (Teams Administrator), SC-400 (Information Protection), ITIL Foundation, and senior identity/security certifications (CISSP, CISM). /li /ulh3bRegulatory context requirements /b /h3ulliExperience in regulated environments (Pharma, Medical, Food, Automotive). /lilibExperience in GMP environments is considered a strong added value. /b /liliKnowledge of GxP, Annex 11 and Data Integrity principles. /liliExperience supporting audits (AIFA/FDA/customers). /liliExperience operating within validated environments (CSV). /liliStructured, quality- and security-oriented approach. /liliAbility to work in complex, multi-site environments. /liliStrong problem-solving attitude and operational autonomy. /lilibFlexibility and ability to adapt to challenging, fast-changing and demanding contexts. /b /liliAbility to interact with technical and business stakeholders. /liliOrientation toward continuous improvement. /li /ulh3bRequired experience /b /h3ulli5–8 years in similar roles covering identity, authentication and collaboration services. /liliExperience in structured / mission-critical enterprise environments. /li /ulpbWhy Join Alfasigma: /b /ppbAt Alfasigma, we foster a culture where the courage to innovate is key to our success. /bWe offer a competitive salary, comprehensive benefits, and extensive opportunities for professional growth and development. /pulliThe anticipated salary range for this position is 55,000- 75,000. This represents the anticipated low and high end of the salary range for this position. Actual salaries may vary based on various factors including, but not limited to, experience, skillset, and performance. /li /ulpOur commitment to people and patients is at the heart of everything we do. We value diversity and welcome individuals with unique perspectives and experiences. We believe that open-mindedness, collaboration, and a shared passion for innovation are essential to achieving meaningful progress. /ppbJoin Alfasigma and become part of a forward-thinking team dedicated to shaping the future of the pharmaceutical industry. /b /p #J-18808-Ljbffr

📌 Global IT Enterprise Core Services (Pomezia)
🏢 ALFASIGMA
📍 Pomezia