IT Systems Engineer (Conditional Access)

Quick Facts

• Role: IT Systems Engineer (Conditional Access)

• Focus: Identity, access control (Conditional Access/MFA/SSO) and PKI/IAM operations

Description

Administer and continuously improve Directory Services, IAM, and PKI infrastructure in a Microsoft 365 and Entra ID environment, including connectors, Conditional Access, MFA, and Single Sign-on. Ensure secure and compliant email communication by administrating and optimizing email encryption gateways. Provide 2nd/3rd-level support, coordinate and deliver IT projects, maintain documentation, and monitor KPIs with budget responsibility.

Responsibilities

• Administration and ongoing development of Directory, IAM, and PKI infrastructure as well as Microsoft 365/Entra ID (connectors, Conditional Access, MFA, SSO)

• Administer and optimize email encryption gateways for secure, legally compliant communication

• Plan, coordinate, and implement IT projects; monitor, document, and further develop supported systems

• Provide second- and third-level support

• Own budget planning; develop, monitor, and report KPIs to ensure quality and efficiency

Requirements

• Degree in Computer Science or equivalent knowledge and skills

• Several years of experience in Directory Services, IAM, and PKI (ideally in a large enterprise)

• Solid knowledge of Microsoft technologies; ideally experience with SailPoint IdentityIQ, Venafi Trust Protection, and Entrust HSM

• Confident, secure use of PowerShell to automate and evolve IAM solutions

• Strong independent, conceptual, structured working style plus analytical and problem-solving skills

• Knowledge of virtualization and storage systems is advantageous

Benefits

• Full-time role with 38 hours/week and 30 days of vacation

• Flexible working hours, overtime compensation, and options for part-time, job sharing, and sabbatical

• Mobile working depending on assignment

• Health and sports offers, company pension, and structured compensation

• Individual development and learning opportunities

• Subsidy for the hvv job ticket and support for bicycle mobility