IT Architect Active Directory & Identity Security

Introduction & Summary

We are seeking an IT Architect specializing in Active Directory and Identity Security. This role requires a deep understanding of identity security standards and architecture, particularly in designing and evolving AD and Entra ID architecture. The ideal candidate will possess expertise in integration with IAM processes and automation of identity workflows.

Main Responsibilities

• Design and evolve AD and Entra ID architecture (Tiering, PAW, RBAC, Least Privilege).
• Define and enforce identity security standards (Tier 0 protection, admin concepts, access models).
• Integrate AD and Entra ID into IAM processes (Joiner-Mover-Leaver, SCIM provisioning).
• Drive automation of identity processes using PowerShell and workflow tools.
• Support and guide implementation teams in complex or critical changes.
• Work closely with IAM, security, and infrastructure teams across countries.
• Own architecture decisions for identity-related topics such as Remote Mailbox and hybrid authentication.
• Ensure governance and documentation for identity architecture and security controls.

Key Requirements

• 5+ years of experience in Active Directory and Entra ID architecture (on-premises and hybrid).
• Strong experience in identity security design (Tier model, Privileged Access, admin isolation).
• Experience integrating AD/Entra ID into IAM systems and processes (JML, SCIM, role models).
• Hands-on experience with PowerShell and automation of identity workflows.
• Solid understanding of hybrid identity and Exchange architecture (no operational Exchange role).
• Experience working in enterprise environments with multiple countries or tenants.
• Ability to lead technical topics across teams and take ownership for decisions.
• Clear communication in English, plus German skills required (min. B2/C1).

Nice to Have

• N/A

Other Details

This role offers the opportunity to work in a dynamic environment focusing on identity and security across multiple geographic locations. Candidates should have a willingness to engage with teams internationally.