Global IT Enterprise Core Services
Pubblicato il 30-10-2026 - ALFASIGMA in Belluno
Alfasigma is a privately held global healthcare company founded over 75 years ago in Italy, where it remains headquartered today in Bologna and Milan. The Group operates in over 100 markets spanning Europe, North and South America, Asia, and Africa.
Over three years ago, we embarked on a transformative journey to become a truly global innovative healthcare company with a leading focus on Gastrointestinal (GI) health . We have experienced remarkable growth, nearly doubled our revenues, expanding geographically, and integrating several key acquisitions. We have also evolved our portfolio, expanded into rare and specialty segments, and strengthened our pipeline and people's capabilities.
But our journey is far from complete In fact, this is just the beginning of a bold new chapter in Alfasigma's history. We are committed to advancing innovation and leveraging our deep expertise to provide better health and a better quality of life for patients and consumers worldwide and expand our reach across diverse markets.
As we continue to grow, we are seeking an individual for our Global IT Enterprise Core Service. This position can be located in either Pomezia, Alanno, Milan, or Bologna.
Scope of the role:
The Individual will be responsible for the management, evolution and security of the enterprise core services that underpin the digital workplace: identity and access management, authentication, directory services and collaboration platforms. The role guarantees the reliability, security and compliance of these foundational services across the organization in a regulated (GxP/GMP) environment, acting as the technical reference point for identity governance and Microsoft 365 collaboration services.
The resource is also expected to manage the full lifecycle of the systems under their responsibility and to operate confidently across hybrid on-premises and cloud infrastructures.
Your key responsibilities:
- Administer and evolve identity platforms (Active Directory, Microsoft Entra ID / Azure AD), including hybrid identity and directory synchronization.
- Manage authentication services: Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access and federation (SAML, OAuth, OIDC).
- Design and operate Identity & Access Management (IAM) processes: provisioning/de-provisioning, role-based access, access reviews and privileged access management (PAM).
- Manage and support enterprise collaboration platforms (Microsoft 365 — Exchange Online, Teams, SharePoint, OneDrive).
- Define and enforce identity and access policies aligned with security and compliance requirements.
- Support integration of applications and services with the corporate identity platform.
- Manage endpoint identity and security integration (Intune/MDM, conditional access, device compliance) in coordination with the Workplace team.
- Manage the full lifecycle of the core-service systems (provisioning, configuration, patching, upgrades, capacity management and secure decommissioning).
- Monitor core services health,
availability and security; manage incidents and root-cause analysis.
- Contribute to Disaster Recovery and Business Continuity for identity and collaboration services.
- Maintain technical and validation documentation in line with GxP/GMP requirements.
- Coordinate with vendors and system integrators.
- Support modernization and security initiatives (Zero Trust, identity governance, lifecycle automation).
Who are you: Technical requirements
- Strong hands-on experience with Active Directory (DNS, DHCP, GPO, sites & services) and Microsoft Entra ID / Azure AD.
- Solid experience with authentication and federation technologies (SSO, MFA, Conditional Access, SAML, OAuth, OIDC, ADFS).
- Experience with IAM / identity lifecycle and access governance.
- Experience administering Microsoft 365 collaboration services (Exchange Online, Teams, SharePoint, OneDrive).
- Solid knowledge of server virtualization on both Microsoft Hyper-V and VMware vSphere/ESXi (vCenter, clustering, HA/DR).
- Experience with hyperconverged infrastructure (HCI) platforms (VMware vSAN, Nutanix, Azure Stack HCI / Azure Local).
- Working knowledge of Microsoft Azure and hybrid-cloud services (Azure Arc, hybrid identity, hybrid connectivity).
- Ability to manage the end-to-end lifecycle of systems and infrastructure (deployment, patching, upgrades, capacity and decommissioning).
- Knowledge of endpoint management and identity-driven security (Intune/MDM, Microsoft Defender for Endpoint) considered a plus.
- Scripting and automation skills (PowerShell, Microsoft Graph) for identity lifecycle and reporting.
- Understanding of security best practices (least privilege, PAM, Zero Trust principles).
Required