Senior DevOps Engineer Authentication, Operations Focus

Rabobank

Utrecht

Hybrid

EUR 46,000 - 65,000

Full time

10 days ago

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Thirteenth month

8% holiday allowance

10% Employee Benefit Budget

Development budget €1,400

Hybrid working

Pension option

Job summary

Rabobank seeks a Senior DevOps Engineer for Authentication with an operations focus. You will support and improve authentication services used by thousands of Rabobank employees across multiple countries, while owning end-to-end operational issues and contributing to automation.

You will work across Windows and Linux environments, manage vulnerabilities and lifecycle of credentials, and participate in on-call rotations.

Qualifications

Several years of hands-on operations in a complex, business-critical IT environment.
Strong analytical and problem-solving skills, with the ability to understand unfamiliar, interconnected systems, troubleshoot issues across system boundaries and drive structural improvements.
Experience with Windows and Linux in hybrid environments and a good understanding of infrastructure, networking and security principles.
Experience with identity and authentication technologies and concepts such as Active Directory, Entra ID, LDAP, FIDO2 or single sign-on.
Some hands-on experience with PowerShell, with the ability to understand, use and troubleshoot automation scripts.
A strong sense of ownership and proactivity. You take responsibility for operational issues, involve the right people when needed and follow problems through to a structural solution.
A practical DevOps mindset, combining operational responsibility with automation, engineering changes and continuous improvement.
Professional proficiency in English.

Responsibilities

Operate, monitor, support and continuously improve business-critical authentication services across cloud, SaaS and on-premises environments.
Take end-to-end operational ownership, including for services where parts of the execution are delegated to other teams.
Investigate incidents and recurring problems, identify root causes and implement structural improvements.
Manage vulnerabilities, compliancy, lifecycle, certificates and secrets to keep our services secure, reliable and demonstrably under control.
Improve automation, monitoring, alerting, recovery procedures and operational documentation.
Contribute to engineering changes, migrations and infrastructure as code, and participate in the on-call rotation.

Skills

Operations ownership

Analytical skills

Windows & Linux

Identity & authentication

Active Directory

Entra ID

LDAP

FIDO2

PowerShell

Automation

DevOps mindset

English proficiency

Job description

Senior DevOps Engineer Authentication, Operations Focus

Salary: Gross monthly salary between EUR 4,105 and EUR 5,862 (scale 08)for a 36-hour work week.
Extras: a thirteenth month, 8% holiday allowance, and a 10% Employee Benefit Budget.
Development budget: EUR 1,400 development budget per year for your growth and development.
Hybrid working: a balance between home and office work (possible for most roles).
Pension: decide for yourself the amount of your personal contribution.

Senior DevOps Engineer Authentication, Operations Focus

Identity & Access Management (IAM) is a core capability for Rabobank. IAM ensures that employees and machines have access to the right resources, at the right time, for the right reasons — in a simple, user‑friendly and secure way. Hopefully you’re smiling when you see how it’s phrased while knowing all the complexity underneath.

You will join the Authentication Squad, formally known as Authentication 4 Employees, within IAM 4 Employees. Our squad is responsible for authentication services used by approximately 48,000 Rabobank employees in 34 countries. These services give employees secure access to their laptops, applications and other Rabobank resources.

This role has a strong operational focus, while you remain active across the full DevOps lifecycle. Your main responsibility is to keep our authentication services reliable, secure, recoverable and demonstrably under control. You will also contribute to engineering changes, automation, lifecycle management, migrations and the controlled decommissioning of services.

Our authentication landscape consists of approximately 75 interconnected software components. Each has its own repository, pipeline, lifecycle and security and compliance requirements. Many components are closely integrated with other services inside and outside the squad. This creates a challenging environment with considerable technical depth. Even experienced team members regularly encounter components they have not worked with before and must quickly understand, troubleshoot or change.

One of our most visible responsibilities is the Security Key service, based on YubiKey technology. Every Rabobank employee has a YubiKey and primarily uses FIDO2 authentication. The squad has worldwide end responsibility for this service. Although parts of its day-to-day execution, such as issuing keys to new employees, are delegated to local teams, we remain responsible for the overall service, technology, processes, integrations, controls and continuity.

Our landscape combines modern and mature authentication technologies. It includes Yubico services, Entra ID Application Proxy, Red Hat Directory Server, Microsoft Identity Manager, Idira Workforce Password Manager, internally developed web applications, RBAC solutions and employee-facing authentication and enrolment portals. These services run across Windows, Linux, Azure, SaaS and on-premises environments.

A substantial part of this landscape consists of mature, business-critical services. Keeping these services secure and available requires careful lifecycle management, structural problem-solving and ongoing automation. At the same time, we are simplifying the landscape and working toward a more unified, passwordless employee authentication experience. Rabobank already uses FIDO2 at scale, while passwords, RSA tokens and other legacy authentication solutions still exist.

Top responsibilities

Operate, monitor, support and continuously improve business-critical authentication services across cloud, SaaS and on-premises environments.
Take end-to-end operational ownership, including for services where parts of the execution are delegated to other teams.
Investigate incidents and recurring problems, identify root causes and implement structural improvements.
Manage vulnerabilities, compliancy, lifecycle, certificates and secrets to keep our services secure, reliable and demonstrably under control.
Improve automation, monitoring, alerting, recovery procedures and operational documentation.
Contribute to engineering changes, migrations and infrastructure as code, and participate in the on-call rotation.

Our technical landscape

You will work in a diverse hybrid environment with around 75 interconnected software components, each with its own lifecycle, dependencies and security requirements. Our core technology landscape includes:

Identity & authentication: Entra ID, Active Directory, Microsoft Identity Manager, Red Hat Directory Server, FIDO2, LDAP, Kerberos, SCIM and single sign-on
Platforms: Windows, Red Hat Enterprise Linux, Azure, SaaS and on-premises environments
Automation & infrastructure: PowerShell, YAML and Terraform
CI/CD: Azure DevOps and Azure Pipelines

Together we achieve more than alone

We believe in the power of difference. Bringing together different perspectives and experiences makes us an even better bank. We are therefore curious about what you can bring to the Authentication Squad and the wider IAM department.

Our squad consists of nine engineers, including a lead engineer. Together with our Product Owner and Scrum Master, we form a multidisciplinary team with end-to-end responsibility for our services.

Talking of Rabobank: we are a Dutch bank that operates internationally for millions of customers. Together with our customers, members and partners, we work to create a world in which everyone has access to enough healthy food.

You are an experienced engineer who enjoys taking operational ownership in a complex technical environment. You bring strong operational expertise and help raise the operational maturity of the squad.

What you bring

Several years of hands-on operations experience in a complex, business-critical IT environment, taking ownership of critical services and operational issues.
Strong analytical and problem-solving skills, with the ability to understand unfamiliar, interconnected systems, troubleshoot issues across system boundaries and drive structural improvements.
Experience with Windows and Linux in hybrid environments and a good understanding of infrastructure, networking and security principles.
Experience with identity and authentication technologies and concepts such as Active Directory, Entra ID, LDAP, FIDO2 or single sign-on.
Some hands-on experience with PowerShell, with the ability to understand, use and troubleshoot automation scripts.
A strong sense of ownership and proactivity. You take responsibility for operational issues, involve the right people when needed and follow problems through to a structural solution.
A practical DevOps mindset, combining operational responsibility with automation, engineering changes and continuous improvement.
Professional proficiency in English.

Nice to have

Experience with one or more of the following is an advantage: