Enterprise Directory Specialist (Synchronisation and Connectors) for NATO with security clearance

Wlgroup; Eigenbrakel; On-site; EUR 70,000 - 90,000; Full time

Job summary

Wlgroup in Belgium seeks an experienced specialist to operate and extend its directory and identity provisioning services on-site in Braine-l'Alleud. You will be the second/third line for synchronisation issues and will manage the service end-to-end, including on-call duties.

You will integrate new data sources, enforce provisioning policies, and mentor colleagues while documenting procedures for consistent operations.

Qualifications

• Experience with X.500/LDAP directories and directory synchronization products, ideally DirX with certification.
• Identity management experience and TCL scripting for automation.
• Active Directory for accounts, permissions and access control; SQL databases behind it all.
• Development in Java or .NET for customisations; PowerShell for automation; Red Hat Linux administration.
• Working knowledge of public key infrastructure and certificate management.
• Excellent English and ability to work independently and solve problems.

Responsibilities

• Monitor, operate and administer the directory and identity products, and their synchronization.
• Build and maintain operating procedures per customer guidance.
• Handle second- and third-line requests via the ticketing system; diagnose and fix issues.
• Connect new data sources and consumers—configuration, customization and new connectors.
• Manage provisioning, backups and recovery, license compliance and security rules.
• Deliver increments and enhancements to the service through incident, change and release management.
• Coach first-line colleagues and write the documentation they need.
• Take your turn on a shared on-call rota and report what happened the following morning.

Skills

X.500 / LDAP

Directory synchronization

Identity management

Scripting TCL

Active Directory

SQL databases

Java or .NET

PowerShell

Red Hat Linux

PKI / Certificates

English proficiency

Job description

When the directory is wrong, everything downstream is wrong.

A multinational defence organisation runs its enterprise directory and identity provisioning on the DirX product family. You would operate it, extend it, and be the second and third line when something stops synchronising - on site in Braine-l'Alleud, with a share of the on-call rota.

What you would be doing

• Monitoring, operating and administering the directory and identity products, and the synchronisation between them
• Building and maintaining the operating procedures the service runs on, following the customer's guidance
• Taking second and third-line requests through the ticketing system, diagnosing and fixing what users report
• Connecting new data sources and consumers - configuration, customisation and new connectors with standard product technologies
• Managing provisioning, backups and recovery, licence compliance and the security rules around the service
• Delivering small increments and enhancements to the application as the service owner asks for them, through incident, change and release management
• Coaching first-line colleagues and writing the documentation they need
• Taking your turn on a shared on-call rota, and reporting what happened the following morning

What you would bring

• Demonstrable expertise in X.500 and LDAP directories and in directory synchronisation products, ideally the DirX family, with the product certification behind it
• Identity management experience, and scripting in TCL for automation inside the product
• Active Directory for accounts, permissions and access control; SQL for the databases behind it all
• Development in Java or .NET for customisations, PowerShell for automation, and Red Hat Linux administration
• Working knowledge of public key infrastructure and certificate management
• Excellent English, the self-motivation to work alone, and the instinct for a problem

Why this one is worth a look

It is deep, specialised product work with a clear owner, in a sprint-based team that shares its on-call fairly, and it runs from a standing framework rather than a one-off project.