Job
In this role, you will develop the technical architecture for Active Directory and Microsoft Entra ID, integrate it into identity and access management processes, and automate AD processes using PowerShell and security tools.
This listing has been machine translated. Show original
Job technologies
- Active Directory
- Entra ID
- Azure AD
- PowerShell
- Defender for Identity
- Microsoft Exchange
Your role in the team
- Together with an experienced colleague, you are responsible for the overall technical architecture of Active Directory (on-premises) and Microsoft Entra ID (Azure AD), ensuring their optimal integration into our Identity & Access Management processes.
- Design and further development of the AD-/Entra ID architecture (tiering, PAW, least privilege)
- Development and implementation of security and authorization concepts
- Integration of AD/Entra ID into IAM processes (e.g., SCIM, Joiner-Mover-Leaver)
- Automation of AD processes with PowerShell and workflow tools
- Use of security tools (e.g., Defender for Identity, Semperis)
- Collaboration with IAM, Security, and Infrastructure Teams
- Responsibility for architecture, design, and governance guidelines for remote mailbox automation and IAM integration; the operational management of Exchange is not within the scope of this role.
Our expectations of you
Education
- Completed training in the IT field (e.g., IT specialist for system integration) or a comparable degree.
Qualifications
- Excellent knowledge of identity and security architectures, especially tiering models (Tier 0/1/2), Privileged Access (PAW), least privilege principles, and governance requirements.
- Exchange knowledge at architecture level, e.g., remote mailbox concepts, hybrid authentication, and IAM integration; no operational Exchange administration or support activities.
- Strong ability to collaborate across departments with IAM, security, and infrastructure teams, as well as to communicate architecture and security decisions clearly.
Experience
- Several years of experience in designing and developing Active Directory architectures (On-Premises/Hybrid) as well as Microsoft Entra ID - not primarily in operational management.
- Experience in integrating AD/Entra ID into IAM processes, e.g., Joiner-Mover-Leaver, SCIM provisioning, role and permission concepts.
- Architecture and design experience in automating identity workflows, ideally with PowerShell and integrated workflow or IAM systems.
What we offer
- People with severe disabilities will be given preference in hiring if they are equally qualified.
Benefits
Health, fitness & fun
Higher take-home pay
Topics you will work on
Job locations
About your employer
As one of the leading parcel service providers in Germany, we see it as our responsibility to offer our customers top quality. This is ensured by over 8,000 employees nationwide who give their best at around 70 locations. Every year we send over 600 million parcels across Europe thanks to their work.
- 250+ Employees
- Established Company
- Onsite, Hybrid
- Logistics, Transportation
More jobs
These jobs might also interest you
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
Lead our Stuttgart IT team, both professionally and as line manager, set priorities, and support each team member's development. Ensure the secure, reliable, and efficient operation of our heterogeneous IT infrastructure, including networks, servers,...
Participation in security analyses and assessment of applications and IT systems. Support in the design and implementation of technical security measures (e.g., WAF, Load Balancing, Firewall, etc.). Conducting and supporting penetration tests,...