Active Directory and Federation Services Engineer (PowerShell, C#, GPO) for NATO with security clearance

WLG; Eigenbrakel; On-site; EUR 90,000 - 130,000; Full time

Job summary

WLG in Belgium seeks a senior engineer to own the Microsoft Identity Manager synchronisation engine across federated domains and forests. You will maintain a large Active Directory estate and ensure identity runs smoothly.

You will diagnose complex issues, install and administer AD, ADFS, directory services and MIM, and write rules to improve the service while coordinating with security and operations teams.

Qualifications

• A degree in computing or information systems or equivalent accreditation.
• At least 10 years installing and maintaining directory synchronisation services in enterprise environments.
• At least 10 years with Active Directory and Federation Services across federated domains and forests.
• Deep Microsoft Identity Manager experience, Global Address List synchronisation, GPO, DNS and gMSA accounts.
• C#, PowerShell and VBScript, and Windows Server 2016 to 2025.

Responsibilities

• Diagnosing and fixing complex identity management issues, focusing on the MIM synchronisation engine.
• Installing, running and administering Active Directory, ADFS, directory services and MIM.
• Writing new MIM management agent rules and improving the service over time.
• Handling incidents and root cause analysis, planning maintenance and disaster recovery.
• Advising development, operations and security teams, and supporting exercises when needed.
• Writing and maintaining standard operating procedures.

Skills

Active Directory

Microsoft Identity Manager

PowerShell

C#

VBScript

English fluency

Education

Degree in computing or information systems

Tools

ADFS

MIM

GPO

DNS

gMSA

Windows Server

Job description

One person, many forests, every account in the right place.

A multinational defence organisation in Braine-l'Alleud runs a large, federated Active Directory estate kept in step by Microsoft Identity Manager. It is looking for a senior engineer who knows the synchronisation engine inside out and can keep identity running smoothly across domains and forests.

What You Would Be Doing

• Diagnosing and fixing complex identity management issues, with a focus on the MIM synchronisation engine
• Installing, running and administering Active Directory, ADFS, directory services and MIM
• Writing new MIM management agent rules and improving the service over time
• Handling incidents and root cause analysis, and planning maintenance and disaster recovery
• Advising development, operations and security teams, and supporting exercises when needed
• Writing and maintaining standard operating procedures

What you would bring

• A degree in computing or information systems, or an equivalent professional accreditation
• At least 10 years installing and maintaining directory synchronisation services in enterprise environments
• At least 10 years with Active Directory and Federation Services across federated domains and forests
• Deep Microsoft Identity Manager experience, Global Address List synchronisation, GPO, DNS and gMSA accounts
• C#, PowerShell and VBScript, and Windows Server 2016 to 2025
• Fluent English and the ability to juggle several projects at once

Why this one is worth a look

A specialist role on one of the more complex identity estates you will find, where deep MIM knowledge is exactly what is valued.