Windows Infrastructure and Identity Engineer (Entra ID, Terraform, Ansible) for NATO with security clearance

Wlgroup; Brunssum; On-site; EUR 90,000 - 120,000; Full time

Job summary

Wlgroup in the Netherlands is seeking a senior engineer to take core services from design through to handover, covering directory, identity, certificates and the Windows infrastructure. You will produce technical designs, install and integrate AD, GPO, DNS/DHCP, certificate services, and federation, including hybrid identity with Entra ID, and lead testing, deployment, and migration.

The role requires 5+ years of enterprise infrastructure experience, strong AD/PKI/Windows Server skills, and a

Qualifications

• At least 5 years designing, implementing and deploying enterprise infrastructure.
• Strong Active Directory, Group Policy, PKI and Windows Server engineering.
• Virtualisation (VMware vSphere or Hyper-V), enterprise storage and backup, high availability and disaster recovery.
• Infrastructure as Code and automation with tools such as Terraform, Ansible or PowerShell DSC, plus CI/CD and Git.
• A security-first mindset: hardening, privileged access and certificate-based authentication.
• Experience in large government or defence environments is a strong plus, as are Microsoft, VMware, Terraform or security certifications.

Responsibilities

• Producing technical designs for core services and turning them into working, tested installations
• Installing, configuring and integrating Active Directory, Group Policy, DNS, DHCP, certificate services and federation, including hybrid identity with Entra ID
• Running testing and acceptance, then supporting deployment and migration into live service
• Writing the technical documentation that goes with every build
• Spotting risks early, contributing to quality assurance and keeping project governance informed
• Reporting regularly on progress, milestones, issues and next steps

Skills

Active Directory

Group Policy

PKI

Windows Server

Virtualisation

Infrastructure as Code

Terraform

Ansible

PowerShell DSC

CI/CD

Git

Security mindset

Defence/government experience

Education

Bachelor's degree in Computing/Engineering

Tools

VMware vSphere

Hyper-V

Terraform

Ansible

PowerShell DSC

Git

Entra ID

Job description

Every login, every certificate, every name lookup. Somebody has to build that foundation properly.

A multinational defence organisation in Brunssum is delivering new communication and information systems, and it needs a senior engineer to take the core services from design through to a clean handover - directory, identity, certificates and the Windows infrastructure underneath them.

What you would be doing

• Producing technical designs for core services and turning them into working, tested installations
• Installing, configuring and integrating Active Directory, Group Policy, DNS, DHCP, certificate services and federation, including hybrid identity with Entra ID
• Running testing and acceptance, then supporting deployment and migration into live service
• Writing the technical documentation that goes with every build
• Spotting risks early, contributing to quality assurance and keeping project governance informed
• Reporting regularly on progress, milestones, issues and next steps

What you would bring

• At least 5 years designing, implementing and deploying enterprise infrastructure and core services, ideally with a degree in computing or engineering
• Strong Active Directory, Group Policy, PKI and Windows Server engineering
• Virtualisation (VMware vSphere or Hyper-V), enterprise storage and backup, high availability and disaster recovery
• Infrastructure as Code and automation with tools such as Terraform, Ansible or PowerShell DSC, plus CI/CD and Git
• A security-first mindset: hardening, privileged access and certificate-based authentication
• Experience in large government or defence environments is a strong plus, as are Microsoft, VMware, Terraform or security certifications

Why this one is worth a look

It is the layer every other system depends on, built from the design stage rather than inherited, inside a long-running international programme.