Senior Engineer (IDAM

NCIM; Eigenbrakel; On-site; EUR 90,000 - 130,000; Full time

Job summary

NCIM seeks a Senior Engineer (IDAM) to support NATO’s Enterprise Identity and Access Management services, focusing on MIM, AD and ADFS across multi-forest environments. You will diagnose complex issues, develop MIM rules, and coordinate incident response under CDM guidance.

The role requires a graduate degree, 10+ years in IDM, fluent English, and NATO COSMIC TOP SECRET clearance. On-site duties in Belgium with potential travel and after-hours work.

Qualifications

• Graduate degree in Computer and Information Systems Technology or equivalent.
• IT experience focused on Identity and Access Management.
• At least 10 years of enterprise experience installing and maintaining Directory Synchronization Services.
• At least 10 years of expertise implementing and maintaining Active Directory and Federation Services across interconnected and federated domains and forests.
• Fluent spoken and written English.
• NATO COSMIC TOP SECRET security clearance required.

Responsibilities

• Install, operate, maintain and centrally administer MIM, Active Directory and ADFS.
• Diagnose and resolve complex identity management and synchronization issues.
• Handle customer incidents and develop MIM management rules.
• Plan and implement maintenance, configuration and installation activities.
• Implement disaster recovery procedures for directory data integrity.
• Develop and maintain SOPs and propose service improvements.
• Advise development, operations, security teams and project managers on identity management.
• Support NATO exercises as required.

Skills

Identity and Access Management

MIM Synchronization Engine

Active Directory

Federation Services

PowerShell

English communication

Security clearance

Education

Graduate degree in Computer and Information Systems Technology

Tools

Microsoft Identity Manager (MIM)

VBScript

C#

DNS

Group Policy

Job description

Senior Engineer (IDAM) — Request C005518

Supports NATO’s Enterprise Identity and Access Management services, focusing on Microsoft Identity Manager (MIM), directory synchronization, Active Directory and Federation Services under the direction of the EIDAM Service Delivery Manager.

Main duties

• Install, operate, maintain and centrally administer MIM, Active Directory and Active Directory Federation Services.
• Diagnose and resolve complex identity management and synchronization issues, particularly within the MIM Synchronization Engine.
• Handle customer incidents, conduct root-cause analysis and develop new MIM Management Agent rules.
• Plan and implement maintenance, configuration and installation activities.
• Implement disaster recovery procedures to protect directory data integrity.
• Develop and maintain Standard Operating Procedures and recommend continuous service improvements.
• Advise development, operations, security teams, subject matter experts and project managers on identity management and directory synchronization.
• Support NATO exercises as required.

Experience and requirements

• Graduate degree in Computer and Information Systems Technology, or an equivalent qualification or relevant professional accreditation.
• IT experience focused on Identity and Access Management.
• At least 10 years of enterprise experience installing and maintaining Directory Synchronization Services.
• At least 10 years of expertise implementing and maintaining Active Directory and Federation Services across interconnected and federated domains and forests.
• Ability to manage multiple tasks and projects and collaborate across teams.
• Fluent spoken and written English.
• NATO COSMIC TOP SECRET security clearance required.

Technical expertise

• Microsoft Identity Manager: MIM administration, particularly the Synchronization Engine in large, multi-forest environments
• Directory synchronization: Cross-domain Global Address List synchronization
• Active Directory and federation: Large multi-forest environments, Directory Services and Federation Services
• Configuration and security: Implementing and troubleshooting AD Group Policies, DNS and group Managed Service Accounts (gMSA)
• Programming and scripting: C#, Microsoft PowerShell and VBScript
• Operating systems: Windows Server 2016, 2019, 2022 and 2025
• Project and software lifecycle: Software lifecycle activities and advising technical specialists and project managers throughout delivery

Assignment conditions

• Location: Braine-l’Alleud, Belgium — full-time on-site
• Working conditions: Normal office conditions; some work outside normal office hours may be required
• Travel: Up to 50 TDY within Belgium per year, as stated in the request; unit not specified