Vice President, Authentication and Directory Services

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

MUFG (Mitsubishi UFJ Financial Group) is one of the world's leading financial groups. Headquartered in Tokyo and with approximately 350 years of history, MUFG is a global network with around 2,300 offices in over 50 countries including the Americas, Europe, the Middle East and Africa, Asia and Oceania, and East Asia.. The group has over 150,000 employees, offering services including commercial banking, trust banking, securities, credit cards, consumer finance, asset management, and leasing.

As one of the top financial groups globally with a vison to be the world's most trusted, we want to attract, nurture and retain the most talented individuals in the market. The size and range of MUFG's global business creates opportunities for our employees to stretch themselves and reap the rewards, whilst our common values, to behave with integrity and responsibility, and to build a culture which is fair, transparent, and honest, underpin everything that we do. We aim to be the financial partner of choice for our clients, whatever their requirements, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

MUFG’s shares trade on the Tokyo, Nagoya, and New York (NYSE: MTU) stock exchanges. The group’s operating companies include, but are not limited to, Bank of Tokyo-Mitsubishi UFJ, Mitsubishi UFJ Trust and Banking (Japan's leading trust bank), Mitsubishi UFJ Securities Holdings (one of Japan's largest securities firms), and MUFG Americas Holdings.

Please visit our website for more information - mufgemea.com.

Corporate Technology is responsible for the operation, development and support of all applications across all areas of the business. Corporate Technology ensures IT strategy, architecture and solutions are aligned to business requirements. Within Corporate Technology, the Infrastructure group manage the day to day running of the technologies which underpin the business systems and focused teams within this portfolio manage the day to day health, support and future direction of each specialist area.

Main Purpose of the Role :

An exciting opportunity for an Authentication & Directory Management Specialist to join MUFG and provide the technical capability to support the creation of a strategic direction for authentication and directories services including all associated tool sets supporting MUFG EMEA.

Currently concentrated primarily around MS Active Directory and focussed on all aspects of this technology, the Authentication & Directory Services team handle day to day management of the AD platform on premise and Entra (Azure AD); the technical documentation; maintenance of platform standards through to the planning of technical direction and strategy.

The VP Authentication & Directory Services role will sit within this highly productive team and the successful candidate will be expected to familiarise themselves with the processes and procedures of the Bank quickly to be able to support and oversee the day to day platform management and the coaching / mentoring on best practice of operating the authentication services and processes. Candidates will be expected to articulate complex technical instruction in plain English to earn the support of senior management stakeholders and those technically less experienced. The role requires an excellent team player; a self-starter with a motivation and desire to seek out & deliver improvements and a drive to document and promote future platform opportunities for approval and funding.

Candidates applying for this role must be able to demonstrate in-depth knowledge of Authentication and Microsoft Active Directory on premise and cloud based Azure Active Directory through either a Microsoft Systems Engineer qualification or at least 8 years’ experience working in this speciality.

Candidates must also be able to demonstrate examples of real-world experiences using their skils allied with a good knowledge of current and future trends within tech around Cyber Security, Identity & Access Management and related authentication methodologies

Number of Direct Reports

Line management responsibility over up to 5 direct reports

Key Responsibilities:

• Acting as the technical authority for directories like Microsoft Active Directory (AD), Entra ID (Azure AD), and LDAP, managing user accounts, groups, and organizational units (OUs).
• Implementing and maintaining security protocols, including Single Sign-On (SSO), Multi-Factor Authentication (MFA) and Conditional Access (CA) policies
• Managing the onboarding, offboarding of application to authentication services and SSO
• Serving as a 3rd line escalation point for complex issues related to authentication, directory synchronization, and access failures.
• Act as the main escalation point for SME 3rd line BAU incidents and tasks for in-depth trouble-shooting and analysis.
• Own the strategy and technical direction for Authentication & Directory Services and ensure alignment to business strategy and MUFG corporate IT goals.
• Creation and maintenance of technical guides to convey fact, simply and effectively to both peers and those less experienced.
• Daily management and maintenance of the Identity Management platform, ensuring service availability; health and performance monitoring & alerting and the maintenance of operational & technical documentation.
• Balance technical fact / opinion against business risk / delivered service to provide well thought through guidance to support technical staff with incident; problem investigation and project decisions.
• Initiate investigation and proactive improvements for standard operating processes and procedures, utilising the current owned / licensed tools available, to evidence and escalate issues to the management team. Candidate should be comfortable in communicating with all levels of the management hierarchy.
• Produce and interpret service performance and security data to provide analysis for investigations; baseline performance and trend reports for management to highlight areas of focus / improvement and on-going change.
• Play a leading role in educating other tech functions in authentication technology and ensure Service Delivery and customer satisfaction is at the heart of the team. Encourage teamwork and co-operation at all times.
• Developing scripts (e.g., PowerShell, Python) to automate user account management and access provisioning to reduce manual errors.
• Push use of Automation and scripting functionality to simplify and improve al aspects of Authentication tasks and monitoring
• Work with the problem management function under the ITIL framework to investigate potential root causes.
• Auditing access, monitoring for suspicious activity (Identity Threat Detection & Response - ITDR), and ensuring compliance with frameworks like GDPR or HIPAA

Skills and Experience:

Functional/Technical Skills and Knowledge requirements

Essential:

• Deep knowledge of directory structures, authentication protocols, and hybrid identity scenarios.
• Microsoft Active Directory and Windows Server
• Microsoft Entra ID / Azure Active Directory
• SAML, OAuth, Kerberos, LDAP
• PowerShell and Kusto Query Language (KQL)
• Abiltiy to create/edit/troubleshoot Powershell Scripts

Preferred:

• Quest AD management tools (for example, Quest Change Auditor, Quest Recovery Manager)
• ADFS
• Certificate Services
• Privileged Access Management
• Single Sign On configuration methods and protocols
• Cloud based resources (Infrastructure as Code, SaaS, Azure fundamentals etc)

Work Experience

• Financial Services experience a bonus
• Experience of Financial regulations, compliance and standards
• Must have Experience of supporting Global Organisation (10,000 users +)

Personal Requirements:

• Excellent communication skills
• Results driven, with a strong sense of accountability
• The ability to operate with urgency and prioritise work accordingly
• Strong decision making skills, the ability to demonstrate sound judgement
• A structured and logical approach to work
• Strong problem solving skills
• A creative and innovative approach to work
• Excellent interpersonal skills
• The ability to manage large workloads and tight deadlines
• Excellent attention to detail and accuracy
• A calm approach, with the ability to perform well in a pressurised environment

Desirable (for Vice President Role)

• Managerial/ supervisory experience within or of an authentication services team and its members
• A proactive, motivated approach, self-managing.
• Ability to empower and inspire team members to work pro-actively.
• Examples of going above and beyond core duties of authentication services role.
• Ability to future plan and set team strategy

We are open to considering flexible working requests in line with organisational requirements.

MUFG is committed to embracing diversity and building an inclusive culture where all employees are valued, respected and their opinions count. We support the principles of equality, diversity and inclusion in recruitment and employment, and oppose all forms of discrimination on the grounds of age, sex, gender, sexual orientation, disability, pregnancy and maternity, race, gender reassignment, religion or belief and marriage or civil partnership.

We make our recruitment decisions in a non-discriminatory manner in accordance with our commitment to identifying the right skills for the right role and our obligations under the law.