Senior Identity Infrastructure Engineer

Euroclear; Polska; Híbrido; PLN 180 000 - 240 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work model

Learning & development opportunities

Competitive benefits

Resumo da oferta

Euroclear is seeking an experienced Microsoft authentication engineer to join a cross‑regional team (Brussels, Paris, Krakow) focused on robust AD/SSO infrastructures. The role emphasizes AD services, ADFS, MFA, and EntraID across multiple forests and tenants, with a strong drive toward security, stability and performance.

The successful candidate will contribute to architecture designs, security baselines, and global configurations while collaborating with ITIL‑driven processes and audits.

Qualificações

• Proven track record designing and maintaining critical authentication infrastructures in a large enterprise environment
• In-depth Active Directory expertise and troubleshooting skills
• Understanding of Kerberos, NTLM, SAML, OAuth, and certificate-based authentication
• Experience with Azure EntraID configuration and management
• Experience creating and reviewing technical designs, plus strong PowerShell automation skills

Responsabilidades

• Design, implement, and manage Active Directory authentication services across multiple forests and domains
• Maintain and operate AD FS for seamless authentication and SSO
• Manage Windows Hello and RSA SecurID for MFA
• Configure and manage Microsoft EntraID across global tenants
• Develop and maintain technical designs and security baselines; participate in audits and security assessments

Conhecimentos

Active Directory

ADFS

Azure EntraID

PowerShell scripting

MFA technologies

Ferramentas

Windows Server

Virtualization

Networking

Storage

Descrição da oferta de emprego

About the role:

You will be joining a team of talented Microsoft authentication engineer based in Brussels, Paris, and Krakow, known for their deep technical expertise and their commitment to ensuring the highest levels of stability, availability, security, and performance across our authentication related infrastructures

The team is responsible for managing and maintaining

• Active Directory authentication services across multiple forests and domains


• Active Directory Federation Services for seamless authentication and SSO


• Windows Hello and RSA SecurID for MFA


• Microsoft Azure EntraID and global tenant configurations


• Architecture Designs and Security baselines for our authentication infrastructures


• Maintain up-to-date documentation and participate in audits and security assessments.

Requirements:

• Proven track record in designing, managing and maintaining critical authentication infrastructures in a large and complex enterprise environment


• In-depth Active Directory expertise and troubleshooting skills.


• Good understanding of different authentications protocols (Kerberos, NTLM,SAML,OAuth,..) , certificates-based authentication


• Experience with Azure EntraID Configuration and Management


• Experience with creation and review of technical designs


• Strong PowerShell scripting knowledge and automation skills


• A good understanding of multiple infrastructure areas like Windows servers, virtualization, networking, and storage


• Preferably a first experience with federation services (ADFS), claims and metadata


• Experience with managing a RSA Authentication Manager infrastructure is considered a plus


• Familiar with ITIL concepts as incident/change/problem management and CMDB


• Experience with Agile methodology and ServiceNow are a plus


• Team player with good interpersonal skills


• Good troubleshooting skills and can deliver under pressure


• You can summarize and clearly communicate complex technical issues


• Well organized, able to handle administrative tasks correctly


• Drive and energy, entrepreneurial attitude, hands-on mentality


• Customer oriented with a focus on delivering quality


• Able to learn new skills fast

Please note that this is a permanent position, and we do not offer freelance or contract arrangements for this role.

About Us

Embark on your new adventure at Euroclear, and work at the heart of the global capital markets. We connect over 2,000 financial institutions across the globe. As an open and resilient infrastructure, we contribute to the stability of the financial markets. We help clients cut through complexity, lower costs, and mitigate risks of financial transactions. At Euroclear, we have the clear ambition to use our key role to facilitate and accelerate a sustainable global financial system.

What We Offer:

• Work closely with inspiring, supportive and engaged colleagues from more than 80 different countries.


• Practice your talents in a highly professional international environment.


• Join a learning and development environment with an emphasis on knowledge sharing and training.


• Competitive salary and comprehensive benefits.

Ways of working

Find your own optimal balance within our hybrid working model, where you can connect at the office 8 days a month and also benefit from remote working.

Great Place to Work for All

We are committed to creating an inclusive culture that celebrates diversity and strives to be a Great Place to Work for All. All qualified applicants will be considered for employment, regardless of any aspect that makes them unique (including race, religion, national origin, gender, sexual orientation, age, marital status, pregnancy, disability, ...). If you need any specific accommodation due to disability or any other reason, you can let the recruiter know during your application process. Our values guide how we work together and shape our future: Our mission and values - Euroclear

About the Team

Group Technology Services (GTS) plans, builds and runs the global infrastructure of Euroclear, and is additionally responsible for the IT service management to the operating entities of the various Group markets. Group Technology Services operates its IT systems and IT services in such a way that, at an appropriate and benchmarked cost level, it can deliver the agreed levels of service to support the requirements of the business processes, for both normal operations and during disaster recovery.