Windows Engineer | IAM | Contracting

Are you an experienced Windows Engineer looking to further specialize in Identity & Access Management? In this role, you will combine Windows infrastructure with Microsoft Entra ID, Active Directory and security. You will help development and application teams securely configure identities, service accounts and applications within a modern hybrid IT environment, making them secure and future-proof.

JOB DESCRIPTION

As a Windows Engineer – Identity & Access Management, you will be the team's specialist in identity, access and Microsoft technologies. You will work in a hybrid infrastructure where Active Directory and Microsoft Entra ID come together, ensuring that users, applications and systems have controlled access to the right resources. You will go beyond traditional infrastructure management and advise teams on secure and scalable identity solutions.

An important part of your role will be professionalizing service accounts and privileged access. You will guide application teams in using Group Managed Service Accounts (gMSAs), App Registrations and Enterprise Applications, while helping phase out traditional service accounts wherever possible. You will also work with PAM solutions such as Delinea, CyberArk or comparable tools to securely manage credentials and privileged accounts.

You will work closely with Security, Infrastructure and Development teams. You will translate technical and functional challenges into practical solutions, establish standards and best practices, and actively contribute to reducing security risks. In doing so, you will play an important role in further developing a secure, manageable and future-proof Microsoft environment.

REQUIREMENTS

1. Demonstrable experience as a Windows Engineer, System Administrator or Windows Infrastructure Engineer
2. Strong knowledge of Windows Server and Active Directory
3. Experience with Microsoft Entra ID (Azure AD)
4. Knowledge of App Registrations, Enterprise Applications and Conditional Access
5. Experience with Group Managed Service Accounts (gMSAs)
6. Knowledge of IAM principles such as Least Privilege, Defence in Depth and Privileged Access
7. Experience with a PAM or Password Vault solution, such as Delinea, CyberArk or HashiCorp Vault
8. Ability to clearly explain technical concepts and challenges to developers, colleagues and stakeholders

PREFERRED:

1. Experience with PowerShell
2. Knowledge of Microsoft Sentinel
3. Experience with Entra Connect or Cloud Sync
4. Knowledge of Hybrid Identity
5. Experience with Security Operations
6. Experience automating infrastructure and management processes

WHAT WE OFFER

1. Hybrid working with flexibility in where you work
2. An excellent salary based on your knowledge and experience
3. Good secondary employment benefits
4. Plenty of room for professional development
5. Opportunities to further specialize in Microsoft Security, IAM and Cloud
6. Working with modern Microsoft technologies and security solutions
7. Collaboration with experienced specialists across Security, Infrastructure and Development

ABOUT THE COMPANY

You will join a professional IT environment where infrastructure, security and cloud technologies are closely interconnected. The organization continuously works to improve the security, reliability and scalability of its IT environment, with Identity & Access Management playing an important role.

You will collaborate with specialists from different disciplines and have the freedom to implement meaningful technical improvements while continuing to develop your own expertise.

You don't need C2 level Dutch, as long as you have a EU passport and are fluent in English!