Senior Identity and Access Engineer (Microsoft Identity Manager, Active Directory, ADFS) for NATO with security clearance

Wlgroup; Eigenbrakel; On-site; EUR 90,000 - 120,000; Full time

Job summary

Unknown multinational defence organisation in Belgium seeks a senior engineer with deep Microsoft Identity Manager experience to ensure cross-forest identity synchronization and smooth operation across domains.

The role covers diagnosing complex issues, implementing MIM rules, administering AD/ADFS, and supporting disaster recovery with strong collaboration across security and operations teams.

Qualifications

• A degree in computing or information systems, or an equivalent professional accreditation.
• At least 10 years installing and maintaining directory synchronisation services in enterprise environments.
• At least 10 years with Active Directory and Federation Services across federated domains and forests.
• Deep Microsoft Identity Manager experience, Global Address List synchronisation, GPO, DNS and gMSA accounts.
• C#, PowerShell and VBScript, and Windows Server 2016 to 2025.
• Fluent English and the ability to juggle several projects at once.

Responsibilities

• Diagnosing and fixing complex identity management issues, with a focus on the MIM synchronisation engine.
• Installing, running and administering Active Directory, ADFS, directory services and MIM.
• Writing new MIM management agent rules and improving the service over time.
• Handling incidents and root cause analysis, and planning maintenance and disaster recovery.
• Advising development, operations and security teams, and supporting exercises when needed.
• Writing and maintaining standard operating procedures.

Skills

English fluency

C#

PowerShell

VBScript

Education

Degree in computing or information systems

Equivalent accreditation

Tools

Active Directory

ADFS

Microsoft Identity Manager (MIM)

GPO

DNS

gMSA accounts

Job description

One person, many forests, every account in the right place.

A multinational defence organisation in Braine-l'Alleud runs a large, federated Active Directory estate kept in step by Microsoft Identity Manager. It is looking for a senior engineer who knows the synchronisation engine inside out and can keep identity running smoothly across domains and forests.

What you would be doing

• Diagnosing and fixing complex identity management issues, with a focus on the MIM synchronisation engine
• Installing, running and administering Active Directory, ADFS, directory services and MIM
• Writing new MIM management agent rules and improving the service over time
• Handling incidents and root cause analysis, and planning maintenance and disaster recovery
• Advising development, operations and security teams, and supporting exercises when needed
• Writing and maintaining standard operating procedures

What you would bring

• A degree in computing or information systems, or an equivalent professional accreditation
• At least 10 years installing and maintaining directory synchronisation services in enterprise environments
• At least 10 years with Active Directory and Federation Services across federated domains and forests
• Deep Microsoft Identity Manager experience, Global Address List synchronisation, GPO, DNS and gMSA accounts
• C#, PowerShell and VBScript, and Windows Server 2016 to 2025
• Fluent English and the ability to juggle several projects at once

Why this one is worth a look

A specialist role on one of the more complex identity estates you will find, where deep MIM knowledge is exactly what is valued.