IT Infrastructure Services 4

The Identity - Directory Services team encompasses key Enterprise-wide programs and services in support of the vision, mission and strategic business plan of Alberta Health Services (AHS). This role works closely with numerous stakeholders across IT, AHS, Alberta Health and vendor partners. The Directory Services Team (Microsoft Active Directory) secures access for approximately 180,000 users and 95,000 computers across Alberta. The Senior Technical Specialist (P4-2) collaborates on Directory Technologies and Architecture pertaining to the Authentication and Authorization into AHS Corporate and Clinical applications using various technology solutions. The position is responsible for ensuring that complex technical and business solutions are delivered in a highly secure and cost-effective manner in accordance with the business requirements and service design. This role will support Directory Services operations on a province wide basis to ensure the systems are operating effectively and efficiently 24x7x365, including On-Call duties as needed. The successful candidate will showcase expertise and experience in large-scale Hybrid Active Directory design and its supporting components, ensuring optimal performance and infrastructure reliability. The candidate will be accountable for operational work to ensure seamless implementation and ongoing system performance, while also providing architectural strategies and roadmaps to implement highly integrated systems that meet complex business requirements.

Specific accountabilities include: The successful candidate will be accountable for managing operational tasks to ensure seamless implementation and ongoing system performance. This includes using change management processes and utilizing ServiceNow for incident, problem, and change tracking, while also playing a pivotal role in architectural strategies and roadmaps. While participating in AHS Projects and business initiatives, the candidate will take a technical support role and assist with driving projects to meet technical deliverables and timelines. Work closely with infrastructure, networking, and application teams to integrate authentication solutions with internal and external systems, ensuring compatibility and security. Develop and maintain technical and user guides, FAQs, and internal documentation as it relates to the tools you will support.

Bachelor’s degree in information technology or equivalent. Over 5 years of work-related experience in a large and complex IT environment. Must have hands on experience with MS Active Directory and supporting tools. Must have experience with Windows Server including installation, configuration, management, and troubleshooting. Must have knowledge of Zero Trust security framework and Identity Management concepts. (MFA, SSO, PIM, PAM, IAM, RBAC). Must have knowledge of Authentication Protocols OAuth, SAML, OIDC, LDAP, and Kerberos. Must have hands on experience with Hybrid Cloud environments including Azure Entra ID, MFA, AD Connect, and Conditional Access Policies. PowerShell scripting abilities. Must have excellent analytical, problem solving and critical thinking skills. Must be proactive and able to work independently without supervision or guidance.

As required.

7+ years of work-related experience in a large and complex IT environment. Experience with MS Azure Security Products including Defender for Identity. Experience with Active Directory Supporting tools such as Active Roles Server, Recovery Manager AD, Change Auditor, and Intrust would be an asset. Knowledge of Release and Change Management Processes, ITIL V3 Certification.