Identity Security Engineer (m/w/d)
Core
Securing and modernizing the identity and access landscape by transitioning from legacy Active Directory to a cloud-capable Identity Platform with Zero-Trust principles.
Role type
Identity Security Engineer
Builds
A modern, cloud-capable Identity Platform with central governance, Privileged Access Management, and Zero-Trust principles
Domain
Cybersecurity / Identity Management
Required skills
Active Directory, Entra ID, OpenID Connect, OAuth 2.0, Kerberos, NTLM, PKI, Privileged Access Management, PowerShell scripting, Identity Security concepts (Tiering, Least Privilege)
Preferred skills
Knowledge of AD/Entra ID attack techniques (Kerberoasting, Pass-the-Hash, ESC vulnerabilities), Hardening measures
Technologies
Active Directory, Entra ID, OpenID Connect, OAuth 2.0, Kerberos, NTLM, PowerShell, AD CS
Responsibilities
Harden and secure Identity Infrastructure in Active Directory and Entra ID, Develop and implement AD Tiering models and Privileged Access concepts, Define security requirements and conduct reviews for PAM and PKI landscapes, Analyze and evaluate vulnerabilities and misconfigurations in Identity Infrastructure, Identify dependencies on legacy protocols and steer their replacement, Automate security checks in the Identity Infrastructure, Monitor current attack techniques on Identity Systems
Seniority
Mid-level, hands-on IC
