IT Architect - Active Directory & Identity Security

Quick Facts

• Role: IT Architect specializing in Active Directory & Identity Security

Description

Design and evolve Active Directory and Entra ID identity security architecture, including tiering, privileged access concepts, RBAC, and least-privilege models. Integrate AD/Entra ID into IAM processes such as Joiner-Mover-Leaver and SCIM provisioning, and automate identity workflows using PowerShell. Own and govern identity-related architecture decisions (e.g., Remote Mailbox and hybrid authentication) while guiding implementation teams across countries.

Responsibilities

• Design and evolve AD and Entra ID architecture (tiering, PAW, RBAC, least privilege)
• Define and enforce identity security standards (Tier 0 protection, admin concepts, access models)
• Integrate AD and Entra ID into IAM processes (Joiner-Mover-Leaver, SCIM provisioning)
• Automate identity processes using PowerShell and workflow tools
• Support and guide implementation teams in complex or critical changes
• Collaborate with IAM, security, and infrastructure teams across countries
• Own architecture decisions for identity-related topics such as Remote Mailbox and hybrid authentication
• Ensure governance and documentation for identity architecture and security controls

Requirements

• 5+ years of experience in Active Directory and Entra ID architecture (on-premises and hybrid)
• Strong experience in identity security design (Tier model, privileged access, admin isolation)
• Experience integrating AD/Entra ID into IAM systems and processes (JML, SCIM, role models)
• Hands-on PowerShell and automation of identity workflows
• Solid understanding of hybrid identity and Exchange architecture (no operational Exchange role)
• Experience working in enterprise environments with multiple countries or tenants
• Ability to lead technical topics across teams and take ownership for decisions
• Clear communication in English; German skills required (min. B2/C1)

Benefits

• Work in a dynamic environment focusing on identity and security across multiple geographic locations
• Opportunity for international collaboration with cross-country teams