Hybrid Active Directory Engineer – EntraID & Security

Ing Hubs Spain; Madrid; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Health insurance

Pension plan

Life insurance

Restaurant card

Flexible remuneration

Transport allowance

Job summary

ING Hubs Spain is seeking an Active Directory Engineer to design, operate, and secure AD DS within a hybrid environment integrated with EntraID. You will collaborate with security and infrastructure teams to build scalable identity solutions in a regulated setting.

You will own on-prem AD DS operations, manage user lifecycles, and support hybrid Entra ID integrations, while following security best practices. English fluency (B2) and an Agile/DevOps mindset are essential.

Qualifications

• Hands-on experience owning and operating on-premises AD DS in enterprise environments.
• Strong Windows Server expertise (2016–2022) including domain controller lifecycle management.
• Experience with Microsoft Entra ID in hybrid identity environments.
• Understanding of identity security concepts (privileged access, least privilege).
• Clear communication in Agile/DevOps teams; fluent English (B2).

Responsibilities

• Manage, operate, and maintain on-premises AD DS environments for stability, security, and availability.
• Perform user, group, and access lifecycle management with RBAC and delegation models.
• Support hybrid identity integrations between on-prem AD DS and Entra ID; troubleshoot authentication.
• Collaborate with cloud, security, and DevOps teams to implement identity-related infrastructure solutions.
• Promote IaC practices (Terraform) to enable standardized deployments.
• Improve operational processes, documentation, and automation for identity services.
• Stay up to date with AD, identity, and security best practices.

Skills

Active Directory

AD DS

Windows Server

EntraID

Hybrid identity

Agile/DevOps

Security best practices

English (Fluent)

Tools

Terraform

Job description

ING Hubs Spain is seeking an Active Directory Engineer to design, operate, and secure AD DS within a hybrid environment integrated with EntraID. You will collaborate with security and infrastructure teams to build scalable identity solutions in a regulated setting.

You will own on-prem AD DS operations, manage user lifecycles, and support hybrid Entra ID integrations, while following security best practices. English fluency (B2) and an Agile/DevOps mindset are essential.