Active Directory Engineer (Identity Services)

TL;DR

Active Directory Engineer (Identity Services): Designing, operating, and securing Active Directory Domain Services in a hybrid environment integrated with EntraID with an accent on identity security and scalability. Focus on managing production AD environments, implementing least privilege access, and leveraging Infrastructure as Code for identity solutions.

Location: Hybrid (Madrid, Spain)

Company

A global technological hub for ING, focused on delivering secure and scalable banking solutions for millions of customers across Europe.

What you will do

• Manage and maintain on-premises AD DS environments to ensure high stability, security, and availability.
• Perform user, group, and access lifecycle management using role-based group structures and delegation models.
• Operate hybrid identity integrations between on-prem AD DS and Microsoft Entra ID, including synchronization and troubleshooting.
• Collaborate with cloud, security, and DevOps teams to implement identity-related infrastructure solutions.
• Apply Infrastructure as Code (IaC) practices, specifically using Terraform, for standardized deployments.
• Optimize operational processes, documentation, and automation for identity services.

Requirements

• 4–5 years of hands-on experience owning and operating enterprise-scale AD DS.
• Strong expertise in Windows Server (2016 to 2022) and domain controller lifecycle management.
• Hands-on experience with Microsoft Entra ID in hybrid identity environments.
• Deep understanding of identity security concepts, including privileged access and attack surface reduction.
• Experience working within Agile and DevOps team structures.
• English: Minimum B2 level required.
• Location: Must be based in Madrid, Spain for hybrid work.

Culture & Benefits

• Flexible hybrid work model allowing a balance between home and office.
• Comprehensive health and life insurance for employees, spouses, and children.
• Restaurant card and transport allowance to support daily commuting.
• Pension plan available after one month of employment.
• Flexible remuneration model for tax-advantaged services like nursery and training.
• Modern office facilities including a gym, doctor, and hairdresser.