Cyber Active Directory & Entra ID Engineer

ING Hubs Spain; Madrid; Híbrido; EUR 55.000 - 70.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Life insurance

Flexible remuneration

Pension plan

Descripción de la vacante

ING Hubs Spain is seeking an Act ive Directory Engineer to design, operate, and secure AD DS in a hybrid environment integrated with EntraID. You will work closely with security and infrastructure teams to build scalable, resilient identity solutions in a regulated setting.

Requirements include 4–5 years of hands-on AD DS experience, strong Windows Server expertise (2016–2022), and hands-on Entra ID in hybrid setups.

Formación

• 4–5 years of hands-on experience owning and operating on-premises Active Directory Domain Services (ADDS) in enterprise-scale environments.
• Producing and supporting production AD environments, not just contributing to them.
• Strong Windows Server expertise (2016–2022), including domain controller lifecycle management and patching strategies.
• Hands-on experience with Microsoft Entra ID in hybrid identity environments.
• Understanding identity security concepts like privileged access, least privilege, and attack surface reduction in AD environments.
• Able to work in Agile / DevOps teams, owning identity-related deliverables and decisions.
• Clear and confident communication with engineers, security teams, and stakeholders.
• Fluent English (minimum B2).

Responsabilidades

• Own and operate on-premises Active Directory Domain Services (AD DS) environments, ensuring stability, security, and availability.
• Perform user, group, and access lifecycle management, including RBAC structures and delegation models.
• Support and operate hybrid identity integrations between on-prem AD DS and Microsoft Entra ID, including synchronization and authentication troubleshooting.
• Collaborate with cloud, security, and DevOps teams to design and implement identity-related infrastructure solutions.
• Advocate infrastructure as code (IaC) practices (e.g., Terraform) to enable standardized deployments.
• Improve operational processes, documentation, and automation for identity services.
• Stay updated with Active Directory, identity, and security best practices and apply them day-to-day.

Conocimientos

Active Directory

Windows Server 2016-2022

Entra ID

Agile / DevOps

English (B2)

Terraform

Herramientas

Terraform

Descripción del empleo

At ING Hubs Spain we are looking for an Active Directory Engineer!

Your role and work environment:

We are looking for a talented and enthusiastic Active Directory Engineer to join our Directory and Identity Services team at ING Hubs Spain.

In this role, you will design, operate, and secure Active Directory Domain Services (AD DS) in a hybrid environment integrated with EntraID. You will work closely with security and infrastructure teams to build secure, scalable, and resilient identity solutions for a highly regulated environment.

Your key responsibilities:

• You have at least 4–5 years of hands‑on experience owning and operating on‑premises Active Directory Domain Services (ADDS) in enterprise‑scale environments.
• You have personally managed and supported production Active Directory environments, not just contributed to them.
• You have strong Windows Server expertise (2016 to 2022), including domain controller lifecycle management and patching strategies.
• You have hands‑on experience with Microsoft Entra ID in hybrid identity environments.
• You understand identity security concepts such as privileged access, least privilege, and attack surface reduction in Active Directory environments.
• You are comfortable working in Agile / DevOps teams, taking ownership of identity‑related deliverables and technical decisions.
• You communicate clearly and confidently with other engineers, security teams, and stakeholders.
• Your level of English is fluent (minimum B2 level).

What are we looking for?

Want to know if this job is made for you? These are some of the qualities that we value the most for this role. And if the shoe fits…

• Manage, operate, and maintain on‑premises Active Directory Domain Services (AD DS) environments, ensuring stability, security, and availability.
• Perform user, group, and access lifecycle management, including role‑based group structures and delegation models.
• Support and operate hybrid identity integrations between on‑prem AD DS and Microsoft Entra ID, including synchronization and authentication troubleshooting.
• Collaborate with cloud, security, and DevOps teams to define and implement identity‑related infrastructure solutions.
• Support the use of infrastructure as code (IaC) practices (e.g. Terraform) to enable standardized and repeatable deployments.
• Help improve operational processes, documentation, and automation related to identity services.
• Stay up to date with Active Directory, identity, and security best practices, applying them pragmatically in day‑to‑day operations.

What do we offer?

The time you spend at work, the challenges you face or the lessons you get are very important, but… What about your personal life? At ING we want your work to fulfill you in every way, and that is why we take care of even the smallest details.

Check out what is waiting for you!

Be flexible my friend.

Our model is all about flexibility and accountability. Keeping both our customers and our colleagues needs in mind, you determine together which days you work at home and which you come to ING MAD to offer your best self. Do your thing.

So that thinking about what to have for lunch doesn’t take up your time or your cravings.

Our house will be your home.

In our offices you can find electric mobility solutions, doctor, hairdresser, gym, The Good Service (to help you with your errands) and much more!

Health insurance.

For you and all your family (spouse/partner and children).

Life insurance.

We help you protect what matters most to you.

Flexible remuneration.

In addition, you will enjoy our flexible remuneration model, through a more tax‑advantaged way, you will be able to access other services such as nursery, transport card, training aids…

It doesn't matter where you live, we’ll help you get to the office.

Pension plan.

You can benefit from our pension plan after 1 month with us!

Discover ING Hubs Spain

We’re building something exciting—and we want you to be part of it.

ING is launching the new member of ING Hubs in Spain, an integral part of ING in charge of designing and delivering important technological and operational solutions to make banking frictionless for our customers. ING Hubs play a key role in our ‘Growing the difference’ strategy to become the best European bank. This will be our sixth global hub, joining a network of over 13,000 professionals in the Philippines, Poland, Romania, Slovakia, Türkiye and Spain.

What makes us different?

We have a tech‑first mindset: We’re not just a bank—we’re a tech company that happens to do banking. Our new hub will be a center of excellence for scalable, fast, and secure technology.

We have global impact: You’ll be working on solutions that serve more than 34 million of customers in over 38 countries.

We are agile: ING was the first bank to adopt agile at scale. We continue to evolve with a collaborative, cross‑functional way of working.

Sustainability at the heart of what we do: We have a role to play in defining new ways of doing business that align economic growth with positive environmental and social impact.

At ING, we believe in diversity, inclusion, and belonging. We’re proud of our international teams and are committed to creating an environment where everyone can thrive. We value authenticity, collaboration, and continuous learning.

We’re looking for curious minds, bold builders, and passionate problem-solvers. If you’re looking for a place to find new ways to drive efficiency and provide superior customer value, where your ideas matter, and where you can grow with purpose—we’re looking forward to meeting you.