Assistant Vice President, Authentication and Directory Services in London

As an Authentication and Directory Services Engineer AVP at MUFG in London, you will play a pivotal role in supporting the bank's authentication infrastructure across EMEA. Your day‑to‑day responsibilities will involve managing Microsoft Active Directory platforms both on‑premise and in Azure cloud environments. You will implement robust security protocols such as SSO, MFA, and Conditional Access policies to ensure secure access for thousands of users. By handling application onboarding/offboarding processes for authentication services you will facilitate smooth integration with SSO solutions. You will act as the go‑to expert for resolving complex authentication issues through detailed troubleshooting while supporting strategic initiatives aimed at improving platform standards. Your ability to create clear technical documentation will help foster knowledge sharing within the team. Additionally, you will monitor platform health metrics daily to ensure optimal service availability. Automation will be central to your role as you develop scripts that streamline user account management tasks. Your guidance during incident investigations will be crucial in balancing technical requirements with business needs. Ultimately, your efforts will contribute directly to maintaining MUFG's reputation for secure operations while promoting teamwork and cooperation throughout the department.

Responsibilities

• Act as the senior analyst responsible for technical engineering of Microsoft Active Directory (AD) and Entra ID (Azure AD) services across EMEA.
• Implement and maintain advanced security protocols including Single Sign-On (SSO), Multi‑Factor Authentication (MFA), Conditional Access policies, ensuring compliance with regulatory frameworks such as SOX and GDPR.
• Manage onboarding and offboarding of applications to authentication services, facilitating seamless integration with SSO solutions.
• Serve as the primary escalation point for complex issues related to authentication failures, directory synchronisation, and access management; resolve BAU incidents through thorough troubleshooting and analysis.
• Support the development of strategic direction for Authentication & Directory Services by contributing technical insights and collaborating with other teams within MUFG.
• Create and maintain comprehensive technical guides that communicate complex information clearly to both peers and less experienced colleagues.
• Oversee daily management of authentication platforms by monitoring service availability, health metrics, performance alerts, and maintaining operational documentation.
• Balance technical guidance against business risk to provide well‑considered advice during incident investigations, problem resolution, and project decision‑making processes.
• Initiate proactive improvements for standard operating procedures using available tools to evidence issues and escalates them appropriately.
• Develop scripts in PowerShell or Python to automate user account management tasks, reducing manual errors and enhancing efficiency.

Qualifications

• Deep knowledge of directory structures, authentication protocols (SAML, OAuth, Kerberos), hybrid identity scenarios, and Microsoft Active Directory both on‑premise and Azure AD environments.
• Proven experience with Quest AD management tools such as Quest Change Auditor and Quest Recovery Manager for effective auditing and recovery operations.
• Expertise in configuring Single Sign‑On methods/protocols alongside Active Directory Federated Services (ADFS) and Certificate Services (ADCS).
• Advanced scripting abilities using PowerShell or Kusto Query Language (KQL) for automating user account management tasks.
• Ability to articulate complex technical instructions clearly in plain English for diverse audiences, including senior stakeholders.
• Experience supporting large‑scale global organisations with over 10,000 users; familiarity with financial regulations such as SOX compliance is highly desirable.
• Strong understanding of Identity Threat Detection & Response (ITDR) methodologies and capability to audit access rights and monitor suspicious activity effectively.
• Excellent communication skills combined with results‑driven accountability; ability to operate with urgency while prioritising workload efficiently.
• Structured approach to work with exceptional attention to detail; adept at managing tight deadlines without compromising accuracy.
• Degree in a technology‑related discipline preferred; Financial Services experience considered advantageous.

MUFG is committed to embracing diversity and building an inclusive culture where all employees are valued, respected, and their opinions count. We support the principles of equality, diversity and inclusion in recruitment and employment, and oppose all forms of discrimination on the grounds of age, sex, gender, sexual orientation, disability, pregnancy and maternity, race, gender reassignment, religion or belief and marriage or civil partnership. We make our recruitment decisions in a non‑discriminatory manner in accordance with our commitment to identifying the right skills for the right role and our obligations under the law.