Senior Identity Infrastructure Engineer

Link Group; Kraków; On-site; PLN 180,000 - 280,000; Full time

Job summary

Link Group seeks an Authentication & Identity Infrastructure Engineer to join an international engineering services team supporting European hubs, including Kraków. You will design, secure, and maintain IAM platforms, ensuring high availability and robust security across a large enterprise environment.

The role emphasizes AD/Azure Entra ID, ADFS, MFA, and automation with PowerShell, along with governance and audit readiness in a financial services context.

Qualifications

• Experience designing and supporting complex IAM infrastructures within large-scale environments.
• Deep expertise in Active Directory and multi-forest/ multi-domain setups.
• Strong knowledge of authentication protocols (Kerberos, NTLM, SAML, OAuth, PKI).

Responsibilities

• Oversee AD/LDAP and Azure Entra ID environments across multiple domains.
• Manage federation and SSO components (ADFS, claims, tokens).
• Support MFA solutions including Windows Hello for Business and RSA SecurID.
• Develop security baselines and document architecture and controls.
• Automate routine admin tasks using PowerShell and scripts.
• Contribute to audits, compliance, and governance activities.

Skills

Identity & Directory

Active Directory

ADFS & SSO

PowerShell

Cloud Identity

Security & MFA

Job description

About the Role

We are seeking a highly skilled Authentication & Identity Infrastructure Engineer to join an international Engineering Services division operating across key European financial hubs (including Krakow, Paris, and Brussels). In this role, you will be part of a specialized team dedicated to designing, securing, and maintaining mission-critical identity and access management (IAM) platforms. You will ensure maximum system availability, resilience, and security across a large-scale, complex enterprise environment.

Key Responsibilities

• Identity & Directory Management: Oversee, configure, and maintain multi-forest and multi-domain Active Directory (AD) environments, LDAP services, and Microsoft Azure Entra ID (global tenant administration).
• Federation & Single Sign-On (SSO): Manage Active Directory Federation Services (ADFS), handling claims, metadata, and token-based authentication to deliver seamless SSO capabilities.
• Multi-Factor Authentication (MFA) & Security: Support and enhance MFA solutions, including Windows Hello for Business and RSA SecurID (RSA Authentication Manager).
• Architecture & Governance: Develop and review technical architecture designs, establish security baselines for authentication systems, and maintain comprehensive technical documentation.
• Automation & Engineering: Leverage PowerShell scripting to automate routine administrative workflows, operational checks, and configuration deployments.
• Compliance & Audit Readiness: Participate in security assessments, vulnerability remediations, and internal/external IT audits to meet strict financial sector compliance standards.

Required Technical Skills & Experience

• Enterprise Experience: Proven track record of designing, supporting, and troubleshooting complex identity and authentication infrastructures within large-scale enterprise environments.
• Core Active Directory: Deep expertise in Active Directory, forest trust architectures, and advanced troubleshooting.
• Challenging Authentication Protocols: In-depth understanding of Kerberos, NTLM, SAML, OAuth, and PKI/certificate-based authentication.
• Cloud & Hybrid Identity: Hands-on experience configuring and managing Microsoft Azure Entra ID (formerly Azure AD).
• Automation: Advanced PowerShell scripting skills for infrastructure automation and management.
• General Infrastructure Knowledge: Solid understanding of core IT infrastructure components, including Windows Server OS, virtualization, enterprise networking, and storage systems.

Desirable / Nice-to-Have

• Experience managing RSA Authentication Manager / RSA SecurID ecosystems.
• Familiarity with ITIL frameworks (Incident, Problem, and Change Management via ServiceNow) and Agile delivery practices.

Soft Skills & Operational Mindset

• Strong analytical and root-cause troubleshooting skills under pressure.
• Ability to translate complex infrastructure issues into clear, concise summaries for stakeholders.
• Collaborative team player with excellent communication skills in English.