位于南京的巴斯夫中国数字化中心吸引、培养和发展充满热情的数字化人才，他们将对巴斯夫的数字化未来产生深远的影响。快来加入我们，成为巴斯夫数字化之旅的一部分。

Digital Hub China in Nanjing attracts, grows, and develops passionate people who will meaningfully impact the digital future of BASF. Come join us and be a part of our digitalization journey.

Objectives:
您将成为身份和访问管理领域全球目录服务团队的一员。
作为 Entra ID / Active Directory 管理员，你将支持管理中国大陆 21vianet Azure 租户的 Entra ID。由于需要与传统的活动目录进行交互，这也将是你工作的一部分。

You will be part of the global Directory Services Team in the area of Identity and Access Management.
In the role of an Entra ID / Active Directory administrator, you will support to manage the Entra ID in 21vianet Azure tenants in mainland China. Due to the interaction with classic Active Directories this will also be part of your job.

Main Task:

• 您需要维护企业级 Entra ID，以支持中国基于 21Vianet 的云计算和在线协作。
• Entra ID 将与企业内部的 AD 和身份验证系统集成，为云计算、设备管理和 Office 365 提供现代混合身份解决方案。
• 各种 IT 管理系统（如：Service Now）的自动化流程也需要与 Entra ID 接口，以实现应用程序授权机制。
• 您将与全球专家合作进行设置。
• Azure Global 和 21Vianet 之间可能存在意想不到的技术差距。您应该对自己的技术深度有信心，以便为定制解决方案做出贡献。
• 管理、维护和开发本地活动目录环境
• 就 AD 主题提供咨询（客户、合作伙伴团队等）
• 确保遵守 SLA、OLA 和 KPI
• 事件和变更处理
• 分析需求，设计兼顾可用性、操作性和安全性的解决方案
• 根据功能规范和安全标准实施和运行解决方案、
• 关注专业领域的最新发展
• 创建和维护操作手册
• 为系统用户编写 SOP、手册等文档
• 监测系统和服务

• You are expected to maintain an enterprise scale Entra ID to support cloud computing and online collaboration based on 21Vianet in China.
• The Entra ID is to be integrated with on-premises AD and authentication system to provide modern hybrid identity solution for cloud computing, device management and Office 365.
• Automation processes from various IT management systems (e.g.: Service Now) also need interfaces with Entra ID for application authorization mechanism.
• You will be working with global experts on the setup.
• Technical gaps between Azure Global and 21Vianet could exist somewhere unexpected. You should be confident in your technical depth to contribute to customized solution.
• Management, maintenance, and development of local Active Directory environment
• Consulting in AD Topics (Customer, partner teams, etc.)
• Ensure the adherence of SLAs, OLAs and KPIs
• Incident and Change Handling
• Analyze requirements and design solutions which balance usability, operations, and security
• Implement and operate solutions according to functional specifications and security standards,
• Keep an eye on latest developments in field of expertise
• Creation and maintenance of operational manuals
• Documentation of SOP, manuals, etc. for users of the system
• Monitoring of Systems and Services

工作要求 Job Requirement:

• 计算机科学、信息学、商业信息学或类似专业的学位
• 至少 3 年相关工作经验
• 具有敏捷工作方式或敏捷实施方法的经验
• 具有项目实施经验
• 在以下领域有实践经验者优先： o Entra ID（Azure AD

o Entra ID（Azure AD）
o Azure 云计算
o Microsoft Windows Active Directory（AD 分区、AD 复制、AD 备份/还原、组策略、共享/NTFS 权限等）
o网络设计
o防火墙
o DNS / DHCP

• 非技术

o熟悉敏捷方法，尤其是看板方法
o Azure Dev Ops
o ITIL
o Service Now
o全分层模型概念
o安全意识

• 技术经验

o 精通 Azure Active Directory 架构
o 具备 MFA、身份验证方法、免密码身份验证方面的经验
o 具有特权身份管理和身份保护方面的经验
o 具有创建、维护条件访问策略并排除故障的经验
o Azure 应用程序和现代身份验证协议方面的经验
o Azure 管理角色和权限管理经验
o Microsoft Azure 许可证
o 熟悉 Azure 活动目录同步工具
o 外部身份、B2B、B2C 方面的知识
o 了解 KQL（Kusto 查询语言），以便对 Log Analytics 工作区中的系统事件进行故障排除。
o 脚本编写能力（首选 Power Shell）

• Degree in Computer Science, informatics, business informatics or in a comparable field
• Minimum 3 years’ related working experience
• Experiencing Agile way of working or agile implementation approach
• Experience in implementing projects
• Practical experience in the following areas is big plus：

o Entra ID (Azure AD)
o Azure Cloud computing
o Microsoft Windows Active Directory (AD Partitions, AD replication, AD Backup/Restore, Group Policy, share/NTFS permissions, etc.)
o Network design
o Firewall
o DNS / DHCP

• Non-technical

o Knowledge of Agile methods, especially Kanban
o Azure Dev Ops
o ITIL
o Service Now
o Full Tiering Model concept
o Security awareness

• Technical Experience

o Strong knowledge on Azure Active Directory architecture
o Experience on MFA, authentication methods, password less authentication
o Experience on Privileged Identity Management and Identity Protection
o Experience on creating, maintaining and troubleshoot Conditional Access policies
o Experience on Azure applications and modern authentication protocols
o Experience on Azure administrative roles and rights management
o Microsoft Azure licenses
o Knowledge in Azure Active Directory sync tool
o Knowledge in external identities, B2B, B2C
o Knowledge in KQL (Kusto query language) for troubleshooting system events in a Log Analytics workspace.
o Scripting capability (preferred in Power Shell)

巴斯夫中国数字化中心于2020年在南京成立。作为全球数字中心的重要部分，中国中心正在迅速发展中，未来将会有更多岗位开放。巴斯夫专注于数字化和创新的IT解决方案，以增强巴斯夫在中国的IT化和专业化，为巴斯夫带来了一支全方位的数字化人才团队，在中国独特的数字化环境中创造解决方案。中心还为湛江一体化基地等大型项目的智能制造做出贡献。
在巴斯夫，我们为可持续发展的未来，创造化学新作用。我们将经济成功与环境保护相结合。我们肩负社会责任。巴斯夫集团超过110，000名员工为巴斯夫的成功做出了贡献。我们的客户遍布世界上几乎所有行业和几乎每个国家。我们的产品组合分为六个部分：化学品，材料，工业解决方案，表面活性剂，营养与护理以及农业解决方案。巴斯夫2020 年销售额为 590 亿欧元。更多信息请见 www.basf.com。

Digital Hub China was founded in 2020 in Nanjing. As part of the Global Digital Hub Verbund, the hub is rapidly growing with a target of a three-digit number of employees in coming years. Focused on digitalization and innovative IT solutions to enhance BASF’s IT portfolio and expertise in China, it brings an all-around capable team of digital talents to create solutions in the context of China’s unique digital landscape to BASF. It also contributes to the smart manufacturing endeavors for the new mega project in Zhanjiang.
At BASF, we create chemistry for a sustainable future. We combine economic success with environmental protection and social responsibility. More than 110,000 employees in the BASF Group contribute to the success of our customers in nearly all sectors and almost every country in the world. Our portfolio is organized into six segments: Chemicals, Materials, Industrial Solutions, Surface Technologies, Nutrition & Care and Agricultural Solutions. BASF generated sales of €59 billion in 2020. Further information at www.basf.com.

BASF Asia-Pacific Service Center is based in Malaysia, we may reach you via Malaysia phone number.

请时刻警惕任何可能的招聘欺诈行为！请注意，巴斯夫绝不会在任何情况下向候选人以任何形式收取任何费用。