Identity Engineer – Tier 2

Jobtailor; Deutschland; Hybrid; EUR 55.000 - 75.000; Vollzeit

Zusammenfassung

Jobtailor is seeking an IT Identity Administrator to manage on-prem Active Directory and Microsoft Entra ID within a hybrid environment. You will handle user provisioning, MFA enrollment, and policy troubleshooting while ensuring secure, compliant identity operations.

The role emphasizes automation, incident response, and rigorous change control, with a focus on seamless integration between on-prem and cloud identity services across client environments.

Qualifikationen

• 3–5 years administering Active Directory in production
• Hands-on with hybrid identity and Entra Connect/Azure AD Connect synchronization
• Experience supporting multifactor authentication and Conditional Access
• Familiarity with Privileged Identity Management and just-in-time access models
• PowerShell proficiency for directory administration and reporting

Aufgaben

• Administer on-prem AD and Microsoft Entra ID in a hybrid environment
• Provision/de-provision user and group accounts with correct OU placement
• - Automate identity lifecycle processes and remediate exceptions
• Assist with password resets and MFA enrollment
• Troubleshoot GPO policy application and replication issues
• Monitor Entra Connect synchronization and resolve routine issues
• Respond to identity service disruptions and escalate appropriately
• Maintain change management documentation and client data handling

Kenntnisse

AD Administration

Entra ID Management

Hybrid Identity

PowerShell

MFA Support

Tools

Entra Connect

Azure AD Connect

Jobbeschreibung

• Perform day-to-day administration and support of client hybrid identity environments spanning on-premises Active Directory and Microsoft Entra ID


• Provision and de-provision user and group accounts in on-premises Active Directory with correct OU placement


• Execute and maintain established Joiner/Mover/Leaver identity lifecycle automation, validating completion and remediating exceptions


• Perform password resets and account unlocks across on-premises AD and synchronized Entra ID identities


• Support multifactor authentication enrollment and troubleshoot routine authentication failures


• Troubleshoot Group Policy application using approved policies, diagnosing precedence, scope, and replication issues without creating or modifying GPOs


• Monitor and triage Entra Connect synchronization errors and sync health alerts, resolving routine issues and escalating configuration-level causes


• Assign licenses and perform standard attribute updates within Entra ID


• Respond to Severity 2 and 3 identity service disruptions, including sync delays and login failures


• Route suspected security incidents to the defined cybersecurity team according to the incident response runbook


• Request, use, and release just-in-time privileged access according to client PAM procedures and maintain accurate elevated-activity records


• Halt activities reserved for client authorization, including sync configuration and topology changes, GPO/OU/schema modifications, Conditional Access changes, elevated role assignments, PIM/PAM configuration, trust and federation changes, and tenant-level authentication method changes


• Maintain accurate documentation and follow change management procedures in client environments


• Report to the Director of Operations under the functional oversight of the client's designated identity function owner

Requirements

• 3–5 years administering Active Directory in a production environment, including account lifecycle, OU and group management, and Group Policy troubleshooting


• Hands-on experience with hybrid identity, specifically Entra Connect or Azure AD Connect synchronization, including sync error triage, attribute flow, and understanding how on-premises changes propagate to the cloud


• Working knowledge of Microsoft Entra ID administration, including licensing, attribute management, and authentication methods


• Practical experience supporting multifactor authentication and Conditional Access from an end-user troubleshooting perspective


• Familiarity with Privileged Identity Management and just-in-time access models


• Ability to work productively without standing administrative rights


• Understanding of identity lifecycle automation and ability to validate and remediate automated provisioning workflows


• Ability to distinguish an identity service disruption from a potential identity compromise and elevate the latter immediately


• Experience delivering support in a managed services or multi-client environment, including ticket queue discipline, SLA adherence, and change management


• PowerShell proficiency for directory administration and reporting


• Microsoft certifications such as SC-300 or equivalent demonstrated experience preferred


• Ability to handle client and company data with care


• Ability to follow information security policies


• Ability to complete required security training


• Ability to report suspected incidents or policy violations promptly


• Ability to maintain accurate documentation and follow change management procedures

Core Competencies

Demonstrates expertise in administering Active Directory and Microsoft Entra ID, with a strong focus on identity lifecycle management, troubleshooting, and security protocols. Proficient in PowerShell for directory administration and experienced in managing multifactor authentication and privileged access.

Highest-signal resume keywords

• Active Directory Administration


• Microsoft Entra ID Management


• Hybrid Identity Synchronization


• PowerShell Proficiency


• Multifactor Authentication Support

Hard Skills

• Active Directory


• Microsoft Entra ID


• Entra Connect


• Group Policy Troubleshooting


• Identity Lifecycle Automation


• Multifactor Authentication


• Conditional Access


• Privileged Identity Management


• PowerShell


• Change Management

Soft Skills

• Attention to Detail


• Problem-Solving


• Communication


• Client Data Handling


• Incident Reporting

Certifications & Qualifications

• Microsoft SC-300

Industry Keywords

• Identity Management


• Managed Services


• SLA Adherence


• Security Training


• Incident Response