Hybrid AD & PAM Security Engineer (Onsite/Remote)

Onetowin; Oost-Vlaanderen; Hybrid; EUR 70,000 - 110,000; Full time

Job summary

Onetowin seeks a Security Engineer with deep AD hardening and PAM expertise to strengthen identity governance. You will assess vulnerabilities, implement secure authentication, and design a structured PAM framework to ensure least privilege and auditable access.

Join a collaborative Security Team and drive governance across AD, PAM, and related tooling. Presence required 3 days on site and 2 days remote as part of the engagement.

Qualifications

• Experience in Active Directory security and hardening.
• Proven experience implementing Privileged Access Management (PAM).
• Strong scripting with PowerShell and familiarity with IAM integration.

Responsibilities

• Lead or participate in the design and governance of AD hardening and PAM.
• Deliver remediation plans, roadmaps, and auditable actions with documentation.
• Collaborate with AD administrators, IAM specialists, and infrastructure engineers.

Skills

Active Directory security

PAM

RBAC

PowerShell

PAWs

IAM integration

Service account security

Tools

PingCastle

ADManager

Splunk

Job description

Onetowin seeks a Security Engineer with deep AD hardening and PAM expertise to strengthen identity governance. You will assess vulnerabilities, implement secure authentication, and design a structured PAM framework to ensure least privilege and auditable access.

Join a collaborative Security Team and drive governance across AD, PAM, and related tooling. Presence required 3 days on site and 2 days remote as part of the engagement.