Expert Engineer, Active Directory / Entra ID / O365 / IAM (CyberArk)

TF1 Tuple TCM France SAS; Paris; On-site; EUR 70,000 - 100,000; Full time

Job summary

Teciem seeks an experienced Identity & IAM Specialist to administer AD/Entra ID, manage M365 workloads, and support CyberArk PAM. You will implement access controls, automate tasks with PowerShell, and ensure secure identity lifecycle across the organization.

Join a team focused on security, identity governance, and reliable authentication for cloud and on‑prem environments. Opportunities for on‑call rotations and process improvement are available.

Qualifications

• 4+ years administering Active Directory environments (GPOs, DNS, OU structure).
• Experience with Entra ID/Azure AD including CA, MFA, RBAC, app integrations.
• Solid experience with Microsoft 365 workloads: Exchange Online, Teams, SharePoint Online.
• Hands-on PowerShell scripting for automation, provisioning, and reporting.
• Experience with IAM/PAM tools, ideally CyberArk (Vault/PSM onboarding).
• Knowledge of LDAP, Kerberos, NTLM, OAuth2, SAML and app access via LDAP/Azure Entra ID.

Responsibilities

• Administer, secure, and optimize Active Directory and Entra ID.
• Manage corporate application access (LDAP/Azure Entra ID).
• Oversee Entra ID synchronization (AD Connect) and Conditional Access policies.
• Maintain security standards for identity environments and PAM workflows.
• Handle onboarding/offboarding of privileged accounts and services.

Skills

Active Directory

Entra ID

Microsoft 365

PowerShell

IAM/PAM (CyberArk)

LDAP/ADFS/OAuth2/SAML

Tools

CyberArk

Azure AD

Exchange Online

Teams

SharePoint Online

Job description

The Work We Do

Teciem designs, builds, and delivers treasury and capital markets software solutions for financial institutions worldwide. We serve banks of every size and geography, offering the right setup for the right need. Our solutions are designed to replace multiple disconnected systems with one complete, front-to-back platform, helping customers to capture trading and business opportunities quickly, clearly and with control. We cover the entire trading lifecycle, ensuring that everything - from execution to position keeping, to risk management – runs smoothly. With decades of experience and one of the largest, most diverse client bases in the industry, we turn deep industry knowledge into software that covers most asset classes, meets complex real-world treasury and capital market's needs, and adapts as markets evolve.

Key contributions include:

• Ensuring stability, performance, and security of identity platforms (Active Directory, Entra ID).
• Configuring applications access through LDAP- based authentication and Azure/ Entra ID.
• Administrate Microsoft 365 services (Exchange Online, Teams, SharePoint…).
• Supporting and enhancing the Privileged Access Management (PAM) platform, particularly CyberArk.
• Providing Level 3 expertise for complex incidents across the Microsoft and IAM ecosystem.
• Participating in transformation projects involving cloud adoption, authentication security (MFA, Conditional Access), and automation.

Responsibilities & Deliverables

• Active Directory & Entra ID Administer, secure, and optimize Active Directory (GPOs, Sites & Services, DNS, delegation models).
• Administer corporate applications access ( Ldap/ Azure Entra ID)
• Manage Entra ID (Azure AD): synchronization (AD Connect), RBAC, Conditional Access, MFA policies.
• Implement and maintain security and hardening standards for identity environments.
• Oversee identity lifecycle management, privileged accounts, service accounts, and group structure.
• Microsoft 365 (O365) Administer Exchange Online: transport rules, mail flow, connectors, anti-spam/anti-phishing.
• Provide advanced support for Teams, including voice, collaboration, and governance aspects.
• Manage SharePoint Online site collections, permissions, access policies.
• Apply compliance and security policies: DLP, retention labels, auditing, eDiscovery, data governance.
• IAM / PAM (CyberArk) Support the operation and evolution of the CyberArk platform.
• Integrate applications, safe structures, privileged accounts, and automation processes.
• Contribute to onboarding/offboarding workflows for sensitive access.
• Support & Expert Assistance Deliver Level 3 technical support across AD/Entra/M365/IAM environments.
• Troubleshoot complex authentication, synchronization, or workload-related issues.
• Assist internal teams with escalations and technical guidance.
• Participate in on-call rotations when required.
• Documentation & Governance Produce and maintain technical documentation, architecture diagrams, and operating procedures.
• Contribute to security posture improvement and operational excellence.
• Define and enforce standards for identity management, naming conventions, and access governance.
• Expected Deliverables Identity & M365 architecture documentation Configuration baselines and automated scripts (PowerShell) CyberArk safe/account configurations and onboarding packages Technical procedures, runbooks, troubleshooting guides Regular security and compliance reports Project deliverables for migrations, hardening, and IAM improvements.

Required Experience

Minimum 4 years of hands‑on experience administering and securing Active Directory environments (GPOs, DNS, OU structure, replication, hardening). Proven experience managing Entra ID (Azure AD), including Conditional Access, MFA, RBAC, application integrations, and identity lifecycle management. Solid operational experience administering Microsoft 365 workloads, including Exchange Online, Teams, and SharePoint Online. Practical experience working with IAM/PAM solutions, ideally CyberArk (Vault, PSM, onboarding of privileged accounts and applications). Strong background supporting authentication mechanisms such as LDAP, Kerberos, NTLM, OAuth2, SAML, and configuring application access via LDAP directories or Azure/Entra ID. Demonstrated success in delivering Level 3 support for complex identity, authentication, and M365 issues. Hands‑on experience with PowerShell scripting for automation, provisioning, and reporting.

Diverse Minds, Shared Ambition

At Teciem, we believe that our strength comes from the diversity of our people. Different perspectives, backgrounds, and experiences fuel our innovation and help us build solutions that truly make a difference in the world of financial technology. We’re committed to creating a workplace where everyone feels respected, heard, and empowered to grow. Here, you can bring your whole self to work, contribute your unique ideas, and be part of a team driven by shared ambition. We welcome talent from all walks of life and encourage applications from individuals of all genders, races, ages, abilities, identities, and beliefs. Together, we’re shaping a culture where diversity isn’t just celebrated — it’s essential to our success.

At Teciem, we design, build, and deliver front-to-back treasury and capital markets software solutions for financial institutions around the world. From regional banks to the world’s largest global institutions, we provide flexible, scalable technology that meets the unique needs of each client – no matter their size or geography. Our award‑winning platforms – Kondor, Summit, Opics, Sophis, Fusion Invest, and Fusion Risk – help clients simplify the trading lifecycle, manage risk with confidence, and operate seamlessly across asset classes and global markets. With decades of domain expertise and one of the largest, most diverse client communities in the industry, we transform complex real‑world treasury and capital markets needs into powerful, future‑ready software. Today, more than 340 financial institutions, including the majority of the world’s top 100 banks, trust our solutions to strengthen their operations and support resilient economies.

Purpose – Why we exist

We empower financial institutions to build resilient and future‑ready economies, worldwide.

Vision – What the future holds

To lead innovation in treasury and capital markets technology, building on the solid foundations of our mission –critical and industry – defining solutions.

Mission – How we get there

We place our clients' success and ambitions at our core, continuously evolving and innovating our solutions to deliver outstanding business value and real economic impact.

You help us simplify Treasury and capital markets can be intricate, but you play a key role in making them easier to navigate. Your ideas and expertise help us transform complicated processes into intuitive, streamlined solutions used by financial institutions worldwide. Every improvement you make creates clarity, efficiency, and real‑world impact for our clients. You shape the future with AI, every day AI isn’t a buzzword here— it’s embedded in how we build, innovate, and deliver. Whether you’re working on smarter automation, data‑driven insights, or enhanced user experiences, your contribution fuels the next generation of intelligent financial technology. You’ll be part of a team that uses AI to make our products faster, sharper, and more meaningful for the industry. You grow through collaboration We believe the best outcomes happen when great minds come together. You’ll work alongside talented colleagues across engineering, product, design, and client‑facing teams — sharing knowledge, solving problems, and learning constantly. Collaboration isn’t just how we work; it’s how we grow, innovate, and support each other.