(Senior) Identity & Directory Services Engineer

SEFE Marketing & Trading Ltd; Greater London; Hybrid; GBP 85,000 - 110,000; Full time

Benefits offered by this job

Flexible working hours

Hybrid option

Attractive remuneration package

Pension and company sports programmes

30 days holiday plus special leave

Company restaurant

Job summary

SEFE Marketing & Trading Ltd is seeking a Senior Identity & Directory Services Engineer to lead the Microsoft identity environment and own Active Directory and Entra ID architectures.

You will mentor engineers, drive automation with PowerShell and IaC, and ensure GDPR and ISO 27001 compliance across directory services. Hybrid work and international collaboration underpin the role.

Qualifications

• Minimum 5 years with Microsoft Active Directory including migrations.
• Strong Entra ID knowledge incl. AD Connect/Cloud Sync and CA.
• Experience with PAM solutions (One Identity or similar).
• PowerShell automation for AD/identity workflows.
• Experience with AD/tenant migrations and Quest Migration Manager.
• Familiarity with identity governance and lifecycle management.
• Fluent German (C1) and good English (B2+).

Responsibilities

• Lead architecture for AD, Entra ID and identity services, coordinating with security and cloud teams.
• Design identity governance, lifecycle management, access reviews and privileged access.
• Evaluate and introduce IAM tools to improve security and automation.
• Plan AD consolidations, tenant migrations and Directory Sync.
• Operate AD/Entra ID services, including GPOs, replication and SPNs.
• Maintain security standards, GDPR/ISO 27001 compliance and DR concepts.
• Develop identity lifecycle automation using PowerShell and Azure Automation.
• Contribute to IaC efforts with Terraform or Ansible with the cloud team.
• Provide technical leadership and mentoring; partner with security, network and app teams.

Skills

Active Directory

Microsoft Entra ID

Privileged Access Management

PowerShell automation

AD/tenant migrations

Quest Migration Manager

Directory Sync

Identity governance

Identity lifecycle management

German language

English language

One Identity

ServiceNow integration

Terraform

Ansible

ISO 27001 / GDPR

Tools

One Identity

Quest Migration Manager

Terraform

Ansible

Azure/Azure Automation

Job description

Job Description

(Senior) Identity & Directory Services Engineer

IN SHORT

We are looking for an experienced Directory Service Lead Engineer to help shape and operate SEFE's Microsoft identity environment. You will take technical ownership of Active Directory and Microsoft Entra ID, lead identity architecture and migration activities, drive automation and security improvements, and act as an escalation point for complex IAM issues. You will also provide technical guidance and mentoring to other engineers.

What Will You Do

Architecture & Strategy

• Technical Lead for architecture of Active Directory, Entra ID and identity services in close coordination with security and cloud architecture.
• Design and improve identity governance, lifecycle management, access reviews and privileged access (PIM/PAM).
• Evaluate and introduce new IAM technologies and tools where they improve security, automation, or operational efficiency.
• Plan and deliver AD consolidations, tenant and cloud migrations, including Quest Migration Manager and Directory Sync.

Operation & Security

• Operate and improve Active Directory, including replication, GPOs, schema, delegation and SPNs.
• Manage Entra ID capabilities including AD Connect/Cloud Sync, Conditional Access, PIM and Identity Protection.
• Integrate identity services with platforms such as One Identity and ServiceNow.
• Define security and operational standards, ensure GDPR and ISO 27001 compliance, and maintain disaster recovery and emergency concepts for directory services.

Automation & Tooling

• Develop and maintain identity lifecycle automation using PowerShell and Azure Automation.
• Contribute to Infrastructure as Code initiatives using Terraform or Ansible in coordination with the cloud team.

Leadership & Collaboration

• Provide technical leadership for the identity environment and act as a trusted partner to architecture and security teams.
• Mentor engineers and act as a technical escalation point for complex identity issues.
• Partner with security, network, cloud and application teams.
• Work with stakeholders to gather requirements and provide technical solution consulting.
• Maintain architecture, operating concepts and standard documentation.

WHAT WILL YOU BRING

• At least 5 years of experience with Microsoft Active Directory, including migrations.
• Strong Microsoft Entra ID knowledge, including AD Connect/Cloud Sync, Conditional Access, Enterprise Apps, SCIM and PIM.
• Experience with Privileged Access Management (PAM), such as One Identity or comparable solutions.
• Strong PowerShell automation skills for AD and identity processes.
• Experience planning and implementing AD or tenant migrations.
• Experience with Quest Migration Manager and Directory Sync.
• Practical experience in identity governance and identity lifecycle management.
• Fluent German (C1) and confident English (B2+).

Desirable

• Entra ID Protection, Microsoft Defender for Identity, Log Analytics or Microsoft Sentinel.
• ServiceNow and IAM/ITSM integration.
• Terraform or Ansible in an identity or cloud environment.
• Microsoft certifications such as AZ-104, SC-300, AZ-500 or SC-100.
• Knowledge of ISO/IEC 27001, NIST and experience in regulated environments, particularly energy, finance or KRITIS.
• Previous technical mentoring, coaching or professional leadership experience.

About Us

SEFE is an international energy company anchored in Europe, delivering energy solutions that ensure reliable and affordable supply. Our activities span the entire energy value chain - from origination and trading to sales, transport and storage. With decades of trading expertise and a growing LNG portfolio, SEFE is one of Europe’s leading suppliers to industrial customers, providing more than 200 TWh of gas and power each year. We supply over 50,000 clients, from small businesses to municipalities and multinational organisations. By investing in clean energies, we support our customers on their decarbonisation journey and contribute to the energy transition. SEFE employs over 2,000 people worldwide and is owned by the Federal Government of Germany.

Our international teams work across locations in Europe, Asia, and North America. We're passionate about energy and the important role it can play in shaping a better future.

Securing energy - now and for the future.

Our Benefits

We stand for an inclusive environment that promotes diversity and supports and values the development of knowledge and skills. Regardless of your position, we offer you plenty of creative freedom and a pleasant atmosphere that encourages you to get involved and think outside the box. In addition, there are numerous company benefits, such as:

• Flexible working hours with the option of hybrid working.
• Attractive remuneration package.
• Appealing working environment in a central location.
• Team-oriented environment with an open feedback culture.
• Company restaurant with a healthy and varied selection of food.
• Job ticket and bike leasing.
• Pension and company sports programmes.
• Company pension scheme.
• 30 days of holiday plus special leave.

Information at a Glance

Job Title: (Senior) Identity & Directory Services Engineer

Job Country: Germany

Job Location: Kassel, Germany | London, United Kingdom

Posting Start Date: 12/10/2026

Business Function: Information Technology

Contract Type: Permanent