Active Directory and Federation Services Engineer (PowerShell, C#, GPO) for NATO with security clearance

Wlgroup; Eigenbrakel; On-site; EUR 120,000 - 150,000; Full time

Job summary

Wlgroup in Belgium is seeking a senior Identity Engineer to maintain and optimize a federated Active Directory estate using Microsoft Identity Manager. You will own the MIM synchronisation engine, diagnose complex issues, and drive reliability across domains and forests.

The role requires deep MIM knowledge, extensive AD/ADFS experience, and hands-on scripting with C#, PowerShell and VBScript, in a multinational defence context. On-site work in Belgium is expected.

Qualifications

• Degree in computing or information systems or an equivalent professional accreditation.
• At least 10 years installing and maintaining directory synchronisation services in enterprise environments.
• At least 10 years with Active Directory and Federation Services across federated domains and forests.
• Deep Microsoft Identity Manager experience, Global Address List synchronisation, GPO, DNS and gMSA accounts.
• Proficiency in C#, PowerShell and VBScript; Windows Server 2016–2025.
• Fluent English and the ability to juggle several projects at once.

Responsibilities

• Diagnose and fix complex identity management issues, focusing on the MIM synchronisation engine.
• Install, run and administer Active Directory, ADFS, directory services and MIM.
• Write new MIM management agent rules and improve the service over time.

Skills

Multitasking

Fluent English

C#

PowerShell

VBScript

Education

Degree in computing or information systems

Tools

Active Directory

ADFS

Microsoft Identity Manager

GPO

DNS

gMSA accounts

Job description

One person, many forests, every account in the right place.

A multinational defence organisation in Braine-l'Alleud runs a large, federated Active Directory estate kept in step by Microsoft Identity Manager. It is looking for a senior engineer who knows the synchronisation engine inside out and can keep identity running smoothly across domains and forests.

What you would be doing

• Diagnosing and fixing complex identity management issues, with a focus on the MIM synchronisation engine
• Installing, running and administering Active Directory, ADFS, directory services and MIM
• Writing new MIM management agent rules and improving the service over time
• Handling incidents and root cause analysis, and planning maintenance and disaster recovery
• Advising development, operations and security teams, and supporting exercises when needed
• Writing and maintaining standard operating procedures

What you would bring

• A degree in computing or information systems, or an equivalent professional accreditation
• At least 10 years installing and maintaining directory synchronisation services in enterprise environments
• At least 10 years with Active Directory and Federation Services across federated domains and forests
• Deep Microsoft Identity Manager experience, Global Address List synchronisation, GPO, DNS and gMSA accounts
• C#, PowerShell and VBScript, and Windows Server 2016 to 2025
• Fluent English and the ability to juggle several projects at once

Why this one is worth a look

A specialist role on one of the more complex identity estates you will find, where deep MIM knowledge is exactly what is valued.