Active Directory Engineer

Rabobank; Utrecht; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Thirteenth month

8% holiday allowance

10% Employee Benefit Budget

EUR 1,400 development budget per year

Job summary

Rabobank seeks an Active Directory Engineer to modernize its identity and access platform. You will shape federation services, automation, and secure access for employees, applications, machines, and emerging AI capabilities within the IAM Tribe.

The role combines on-prem AD, cloud Entra ID, and hybrid identity across Azure and AWS environments. You will work in a highly skilled team, focusing on security, reliability, and scalability, with ownership and knowledge sharing at the core of the

Qualifications

• Strong experience with Active Directory Domain Services in large enterprise environments.
• Experience with Active Directory Federation Services (ADFS) and modern federation technologies.
• Solid understanding of authentication/authorization protocols (Kerberos, NTLM, LDAP, SAML, OAuth2, OpenID Connect, SCIM).
• Experience with Microsoft Entra ID and hybrid identity architectures.
• Experience with Azure and/or AWS cloud platforms.
• Strong automation mindset and IaC/CI-CD practices.
• Excellent analytical and troubleshooting skills.
• Strong communication & stakeholder management in Dutch and English.

Responsibilities

• Lead modernization and decommissioning of legacy identity/authentication solutions across the bank.
• Design and improve Active Directory and federation architectures.
• Translate business and security requirements into practical technical solutions.
• Support and advise development teams on authentication/identity integrations.
• Improve automation, monitoring, and operational excellence of identity services.
• Ensure IAM data remains reliable, traceable, and compliant with regulatory frameworks like DORA and NIS2.

Skills

Active Directory

ADFS

Federation technologies

Authentication protocols

Microsoft Entra ID

Hybrid identity

Azure

AWS

Automation & CI/CD

Tools

CI/CD tooling

Infrastructure as Code

Job description

Job Description

As an Active Directory Engineer within Tech4IAM, you will play a key role in one of Rabobank's most critical identity platforms. You will help shape the future of Identity & Access Management by modernizing our Active Directory landscape, strengthening federation services, and enabling secure access for employees, applications, machines, and emerging AI-driven capabilities.

Your work directly impacts all Rabobank employees. Together with your team, you ensure our identity services remain secure, reliable, scalable, and future-proof in an increasingly complex digital world.

Identity & Access Management (IAM) is a core capability within Rabobank. IAM ensures that people, applications, services, and machines have access to the right resources, at the right time, for the right reasons.

As an Active Directory Engineer, you will be part of the IAM Tribe, responsible for delivering a secure and modern identity fabric across the bank. You will work at the heart of our authentication and identity infrastructure, combining deep Active Directory expertise with modern cloud identity, federation, automation, and AI-related access management challenges.

The world around us is changing rapidly. Geopolitical developments, emerging AI agents, cloud transformation, post-quantum cryptography, and ever-increasing regulatory requirements continuously create new opportunities and challenges. We are looking for someone who is excited by these developments and wants to help define the future of identity within Rabobank.

You will work in a highly skilled and collaborative team where knowledge sharing, innovation, and ownership are key values. We encourage engineers who not only solve technical challenges but also help strengthen the team around them.

This is what we offer you

• A thirteenth month, 8% holiday allowance, and a 10% Employee Benefit Budget.
• EUR 1,400 development budget per year for your growth and development.
• A balance between home and office work.
• The freedom to decide the amount of your personal pension contribution.

What You'll Do

Practical Examples

• Lead the modernization and decommissioning of legacy identity and authentication solutions throughout the bank.
• Design and improve Active Directory and federation architectures.
• Translate business and security requirements into practical and sustainable technical solutions.
• Support and advise development teams on authentication, authorization, and identity-related integrations.
• Improve automation, monitoring, and operational excellence across identity services.
• Ensure IAM data remains reliable, traceable, and compliant with regulatory frameworks such as DORA and NIS2.

Top Responsibilities

• Design, maintain, and modernize Active Directory services and infrastructure.
• Manage and optimize federation services including ADFS, SAML, OAuth2, and OpenID Connect.
• Drive hybrid identity solutions across on-premises Active Directory and Microsoft Entra ID.
• Develop automation, tooling, and platform capabilities that improve operational efficiency and user experience.
• Design and deploy identity solutions across Azure, AWS, and on-premises environments.
• Build and improve CI/CD pipelines and infrastructure-as-code capabilities.
• Troubleshoot complex identity and authentication challenges.
• Act as a trusted advisor for product owners, architects, engineers, and business stakeholders.
• Help create a collaborative, positive, and high-performing engineering culture.

Together We Achieve More Than Alone

At Rabobank, we believe our best results come from teamwork.

We're looking for someone who enjoys collaborating, sharing knowledge, and supporting colleagues. Someone who brings positive energy, challenges ideas constructively, and helps the team succeed together.

Technical excellence is important, but so is being a team player. We value people who create connections, take ownership, and contribute to a culture where everyone can perform at their best.

You will join a team of experienced identity specialists who are passionate about technology, security, and continuous improvement. Together, we safeguard the digital identity of thousands of Rabobank employees.

You & Your Talent

You Bring

• Strong experience with Active Directory Domain Services (AD DS) in large enterprise environments.
• Experience with Active Directory Federation Services (ADFS) and modern federation technologies.
• Solid understanding of authentication and authorization protocols such as Kerberos, NTLM, LDAP, SAML, OAuth2, OpenID Connect, and SCIM.
• Experience with Microsoft Entra ID and hybrid identity architectures.
• Experience with cloud platforms such as Azure and/or AWS.
• A strong automation mindset and experience with infrastructure-as-code and CI/CD practices.
• Excellent analytical and troubleshooting skills.
• Strong communication and stakeholder management skills.
• Excellent written and verbal communication skills in Dutch and English.

Extra Nice To Have

• Experience with identity governance and privileged access management.
• Experience with AI-assisted engineering or a strong interest in emerging AI technologies.
• Experience designing identity controls for AI agents, machine identities, and non-human identities.
• Knowledge of modern cybersecurity frameworks and regulatory requirements.
• Experience coaching colleagues and sharing technical knowledge.

What Makes You Successful

You are:

• Passionate about Identity & Access Management.
• Curious about new technologies and innovation.
• Positive, approachable, and collaborative.
• A natural team player who enjoys helping others succeed.
• Comfortable taking ownership and driving improvements.
• Eager to learn and continuously develop yourself.
• Someone who combines technical depth with the ability to bring people together.