Directory Services Architect (m/w/d)

MANN+HUMMEL; Ludwigsburg; Hybrid; EUR 90,000 - 140,000; Full time

Benefits offered by this job

Independence

Performance pay

35 hours per week

Hybrid working

Company restaurant

Daycare options

Private health insurance

Pension plan

Discounts

Transport subsidies

Job summary

MANN+HUMMEL is seeking a Directory Services Architect to design, optimize, and operate enterprise directory and identity platforms (Active Directory and Microsoft Entra ID) in hybrid environments. You will help establish standards, improve security, and enable seamless access for users, devices, and applications across cross-functional teams.

The role involves defining architecture governance, advising on privileged access and PKI topics, and applying advanced troubleshooting to maintain

Qualifications

• University degree in Computer Science or equivalent.
• Several years of experience implementing and managing Active Directory in an enterprise.
• Scripting and automation skills, particularly with PowerShell; general coding experience is desired.
• Familiarity with identity and access management concepts and best practices.

Responsibilities

• Design and continuously improve enterprise directory services architecture, including AD and Microsoft Entra ID.
• Define architecture standards, guidelines, and governance for directory and identity services.
• Provide architectural guidance for privileged access, authentication technologies, and PKI-related topics.
• Troubleshoot complex directory, identity, authentication, access, and infrastructure issues.
• Support risk assessments, incident response, and logging/monitoring requirements.
• Enable operations through documentation, guidance, standards, and knowledge transfer.
• Collaborate with infrastructure, cloud, security, and application teams to deliver secure, scalable directory services.
• International travel readiness.

Skills

Active Directory

Microsoft Entra ID

PowerShell

Automation scripting

Identity management

Privileged access

Education

University degree

Job description

The Directory Services Architect supports the design, optimization, and operation of enterprise directory and identity platforms (Active Directory and Microsoft Entra ID) in hybrid environments. Working closely with cross-functional teams, this role contributes to establishing standards, improving security and reliability, and enabling seamless access for users, devices, and applications.

Your Challenge

• Design and continuously improve enterprise directory services architecture, including Active Directory, Microsoft Entra ID, and related identity platforms
• Define architecture standards, technical guidelines, best practices, and governance principles for directory and identity services
• Provide architectural guidance for privileged access, authentication technologies, identity integrations, certificates, and PKI-related topics
• Apply advanced troubleshooting skills to resolve complex directory, identity, authentication, access, and infrastructure-related issues
• Support risk assessments, incident response, operational improvements, and logging and monitoring requirements
• Enable Service Center Operations through documentation, guidance, standards, and knowledge transfer
• Collaborate with infrastructure, cloud, security, workplace, and application teams to deliver secure, reliable, and scalable directory services solutions
• Education: University degree in Computer Science, Business Informatics, or a comparable field
• Professional Experience: Several years of experience in implementing and managing Active Directory services in an enterprise environment
• Skills:
  • Solid experience with Active Directory and Microsoft Entra ID
  • Scripting and automation skills, particularly with PowerShell; general coding experience is desired
  • Understanding of identity and access management concepts and best practices
  • Experience with privileged access concepts and directory services operations
  • Basic knowledge of authentication protocols and certificate management
• Language skills: Very good German and English language skills
• Personality:
  • Strong communication skills and ability to work effectively in cross-functional teams
  • Ability to translate complex environments into clear strategies, roadmaps, and measurable outcomes
  • KPI-driven, service-oriented mindset with strong governance and risk awareness
  • International travel readiness

Diversity and inclusion are part of our DNA. We filter exclusively for the best talent. We therefore welcome applications from all people regardless of age, gender, origin, ancestry, disability, or other legally protected grounds.

Job description:

Role Summary

The Directory Services Architect supports the design, optimization, and operation of enterprise directory and identity platforms (Active Directory and Microsoft Entra ID) in hybrid environments. Working closely with cross-functional teams, this role contributes to establishing standards, improving security and reliability, and enabling seamless access for users, devices, and applications.

Your Challenge

• Design and continuously improve enterprise directory services architecture, including Active Directory, Microsoft Entra ID, and related identity platforms
• Define architecture standards, technical guidelines, best practices, and governance principles for directory and identity services
• Provide architectural guidance for privileged access, authentication technologies, identity integrations, certificates, and PKI-related topics
• Apply advanced troubleshooting skills to resolve complex directory, identity, authentication, access, and infrastructure-related issues
• Support risk assessments, incident response, operational improvements, and logging and monitoring requirements
• Enable Service Center Operations through documentation, guidance, standards, and knowledge transfer
• Collaborate with infrastructure, cloud, security, workplace, and application teams to deliver secure, reliable, and scalable directory services solutions
• Education: University degree in Computer Science, Business Informatics, or a comparable field
• Professional Experience: Several years of experience in implementing and managing Active Directory services in an enterprise environment
• Skills:
  • Solid experience with Active Directory and Microsoft Entra ID
  • Scripting and automation skills, particularly with PowerShell; general coding experience is desired
  • Understanding of identity and access management concepts and best practices
  • Experience with privileged access concepts and directory services operations
  • Basic knowledge of authentication protocols and certificate management
• Language skills: Very good German and English language skills
• Personality:
  • Strong communication skills and ability to work effectively in cross-functional teams
  • Ability to translate complex environments into clear strategies, roadmaps, and measurable outcomes
  • KPI-driven, service-oriented mindset with strong governance and risk awareness
  • International travel readiness

Profile description:

• Education: University degree in Computer Science, Business Informatics, or a comparable field
• Professional Experience: Several years of experience in implementing and managing Active Directory services in an enterprise environment
• Skills:
  • Solid experience with Active Directory and Microsoft Entra ID
  • Scripting and automation skills, particularly with PowerShell; general coding experience is desired
  • Understanding of identity and access management concepts and best practices
  • Experience with privileged access concepts and directory services operations
  • Basic knowledge of authentication protocols and certificate management
• Language skills: Very good German and English language skills
• Personality:
  • Strong communication skills and ability to work effectively in cross-functional teams
  • Ability to translate complex environments into clear strategies, roadmaps, and measurable outcomes
  • KPI-driven, service-oriented mindset with strong governance and risk awareness
  • International travel readiness

Diversity and inclusion are part of our DNA. We filter exclusively for the best talent. We therefore welcome applications from all people regardless of age, gender, origin, ancestry, disability, or other legally protected grounds.

We offer:

• You will work with a high degree of independence and decision-making freedom
• Performance-based pay and comprehensive benefits
• 35 hours per week with flexitime or trust-based working hours (depending on the position) plus 30 days of vacation
• Option for hybrid working (4 days in Ludwigsburg, 1 day mobile). (For children under 12 years of age, the following still applies: 3 days in Ludwigsburg, 2 days mobile)
• Everyone has talent: Our talent management process supports you in your professional development
• Company restaurant
• Places in a private daycare center in the vicinity (both for children under and over 3 years of age)
• A modern company pension plan to supplement your statutory pension insurance
• Additional private health insurance (e.g., supplementary dental insurance)
• A large number of discounts in our corporate benefits portal (e.g., on vacations, fashion, insurance, etc.)
• Mobility offers: subsidy for the Deutschlandticket, JobRad leasing, and e-charging stations in the free parking garage with company charging rates