Expert Engineer, Active Directory / Entra ID / O365 / IAM (CyberArk)

Teciem; Paris; Hybrid; EUR 75,000 - 110,000; Full time

Job summary

Teciem is seeking an Expert Engineer to own identity and collaboration platforms across Active Directory, Entra ID, M365, and IAM (CyberArk). You will act as a technical reference, designing, securing, and operating Microsoft environments and privileged access solutions.

Responsibilities include administering AD/Entra ID, configuring LDAP-based access, managing Azure Entra ID, and supporting PAM. The role emphasizes on-call support, documentation, and security governance.

Qualifications

• 4+ years hands-on administering and securing Active Directory environments.
• Proven experience managing Entra ID (Azure AD) including Conditional Access, MFA, RBAC, and lifecycle management.
• Solid experience administering Microsoft 365 workloads (Exchange Online, Teams, SharePoint).
• Practical IAM/PAM experience, ideally CyberArk (Vault, PSM, onboarding privileged accounts).
• Strong background with authentication mechanisms (LDAP, Kerberos, NTLM, OAuth2, SAML).
• PowerShell scripting for automation, provisioning, and reporting.

Responsibilities

• Administer, secure, and optimize Active Directory and Entra ID configurations.
• Manage Entra ID synchronization, RBAC, Conditional Access, and MFA policies.
• Administer Exchange Online, Teams, and SharePoint Online; apply governance policies.
• Support CyberArk PAM, integrate apps, onboard privileged accounts.
• Deliver Level 3 support for identity, authentication, and M365 issues.
• Produce technical docs, runbooks, and governance artifacts.

Skills

Active Directory

Entra ID

Microsoft 365

IAM

CyberArk

PowerShell scripting

LDAP/SSO

Tools

CyberArk

PowerShell

Azure AD

Job description

**The Work We Do**Teciem designs, builds, and delivers treasury and capital markets software solutions for financial institutions worldwide. We serve banks of every size and geography, offering the right setup for the right need.Our solutions are designed to replace multiple disconnected systems with one complete, front-to-back platform, helping customers to capture trading and business opportunities quickly, clearly and with control. We cover the entire trading lifecycle, ensuring that everything - from execution to position keeping, to risk management – runs smoothly.With decades of experience and one of the largest, most diverse client bases in the industry, we turn deep industry knowledge into software that covers most asset classes, meets complex real-world treasury and capital market's needs, and adapts as markets evolve.**What will you contribute?**As Expert Engineer for Active Directory, Entra ID, Microsoft 365, and IAM (CyberArk) you will play a central role in ensuring the reliability, security, and evolution of the company’s identity and collaboration platforms. You will act as a technical referent, expert supports IT, Cybersecurity, and business teams in designing, securing, and operating Microsoft environments and privileged access solutions.**Key contributions include:*** Ensuring stability, performance, and security of identity platforms (Active Directory, Entra ID).* Configuring applications access through LDAP- based authentication and Azure/ Entra ID* Administrate Microsoft 365 services (Exchange Online, Teams, SharePoint...).* Supporting and enhancing the Privileged Access Management (PAM) platform, particularly CyberArk.* Providing Level 3 expertise for complex incidents across the Microsoft and IAM ecosystem.* Participating in transformation projects involving cloud adoption, authentication security (MFA, Conditional Access), and automation.**Responsibilities & Deliverables:** **Active Directory & Entra ID*** Administer, secure, and optimize Active Directory (GPOs, Sites & Services, DNS, delegation models).* Administer corporate applications access ( Ldap/ Azure Entra ID)* Manage Entra ID (Azure AD): synchronization (AD Connect), RBAC, Conditional Access, MFA policies.* Implement and maintain security and hardening standards for identity environments.* Oversee identity lifecycle management, privileged accounts, service accounts, and group structure.**Microsoft 365 (O365)*** Administer Exchange Online: transport rules, mail flow, connectors, anti-spam/anti-phishing.* Provide advanced support for Teams, including voice, collaboration, and governance aspects.* Manage SharePoint Online site collections, permissions, access policies.* Apply compliance and security policies: DLP, retention labels, auditing, eDiscovery, data governance.**IAM / PAM (CyberArk)*** Support the operation and evolution of the CyberArk platform.* Integrate applications, safe structures, privileged accounts, and automation processes.* Contribute to onboarding/offboarding workflows for sensitive access.**Support & Expert Assistance*** Deliver Level 3 technical support across AD/Entra/M365/IAM environments.* Troubleshoot complex authentication, synchronization, or workload-related issues.* Assist internal teams with escalations and technical guidance.* Participate in on-call rotations when required.* Documentation & Governance* Produce and maintain technical documentation, architecture diagrams, and operating procedures.* Contribute to security posture improvement and operational excellence.* Define and enforce standards for identity management, naming conventions, and access governance.**Expected Deliverables*** Identity & M365 architecture documentation* Configuration baselines and automated scripts (PowerShell)* CyberArk safe/account configurations and onboarding packages* Technical procedures, runbooks, troubleshooting guides* Regular security and compliance reports* Project deliverables for migrations, hardening, and IAM improvements**Required Experience:*** Minimum 4 years of hands‐on experience administering and securing Active Directory environments (GPOs, DNS, OU structure, replication, hardening).* Proven experience managing Entra ID (Azure AD), including Conditional Access, MFA, RBAC, application integrations, and identity lifecycle management.* Solid operational experience administering Microsoft 365 workloads, including Exchange Online, Teams, and SharePoint Online.* Practical experience working with IAM/PAM solutions, ideally CyberArk (Vault, PSM, onboarding of privileged accounts and applications).* Strong background supporting authentication mechanisms such as LDAP, Kerberos, NTLM, OAuth2, SAML, and configuring application access via LDAP directories or Azure/Entra ID.* Demonstrated success in delivering Level 3 support for complex identity, authentication, and M365 issues.* Hands-on experience with PowerShell scripting for automation, provisioning, and reporting.