Join the Team: Directory Service Lead Engineer (Identity and Access Management team)
Location: Madrid, Spain (with work from home possible)
Contract: Full-time, Permanent role
Salary guide: 65k+ Euro/year
Relocation assistance to Spain provided for EU candidates.
About the role:
As the Lead Engineer in the Directory Services domain, you'll play a pivotal role in shaping and sustaining the identity infrastructure that underpins the organisation worldwide. This global role is central to ensuring our Directory Services—encompassing Active Directory, Entra ID, and Entra ID Connect—are robust, secure, and aligned with the broader Identity and Access Management (IAM) strategy.
You’ll be hands-on in engineering and operational work while collaborating across technical teams and vendors to ensure a high-performing service landscape.
Key Responsibilities:
- Act as a technical leader within the Directory Services operations team, contributing to daily operations and long-term improvements.
- Diagnose and resolve issues involving directory authentication, replication, and synchronisation within both AD and Entra ID environments.
- Support application integration efforts by managing Entra ID application registrations and implementing SSO/SAML configurations.
- Build and maintain trust relationships in ADFS.
- Write and maintain PowerShell automation scripts to improve efficiency and support reporting needs.
- Provide technical expertise and consultation to internal teams on all matters concerning Directory Services.
- Triage and resolve service requests and incidents related to authentication and directory systems.
- Take charge of resolving critical (P1) incidents by leading cross-functional efforts to restore services swiftly.
- Keep documentation and service definitions current in collaboration with service owners.
- Manage service-related assets, including tools, infrastructure, personnel, and processes.
- Interface with external vendors and partners involved in service delivery.
- Operate comfortably within Microsoft technology stacks, especially Active Directory and Entra ID, at a scale of 40,000+ users.
- Apply strong knowledge of enterprise security practices and technologies relevant to identity systems.
Profile Requirements:
- A minimum of three years working in large-scale, international Directory Services environments (Active Directory, Entra ID, Entra ID Connect).
- A solid foundation of experience across IT disciplines, with a clear specialisation in identity and access technologies.
- Deep technical knowledge in Microsoft identity platforms, particularly AD and Entra ID.
- Strong verbal and written communication skills, capable of translating technical detail into understandable insights for a range of audiences.
- Able to collaborate effectively across departments, bringing a strategic mindset and solution-focused attitude.
- Flexible, pragmatic, and well-organised when managing multiple priorities in a dynamic environment.
- Desirable experience with technologies such as PAM solutions, DNS, DHCP, and IGA platforms.
- ITIL V3 certification.
- Relevant Microsoft accreditations such as MCSE or Entra ID certifications.
- Willingness to travel occasionally (up to 20%).
Some Benefits:
- We’re here to help with your move (if applicable relocation)
- Yearly bonus of up to 10% of your salary
- 25 days of paid vacation, plus an extra 6 sick days
- Training and courses, fully covered
- Monthly pension allowance
- Work from modern, comfortable offices or work from home full-time
Why choose us?
Our client is proud to be a global thought leader, leading 30,000+ colleagues with a collective spirit working in over 60 countries globally.
You’ll have the opportunity to grow and work across an extensive portfolio of global brands. They empower colleagues to work in the smartest, most efficient ways to achieve total balance between the demands of their jobs and their lives.
Relocation assistance to Spain provided for EU candidates.
Sounds interesting? Please send us your CV or LinkedIn profile outlining your track record of achievements. In case of any questions, please get in touch with info@fullstacktalents.com
We are looking forward to hearing from you!
By replying to this job offer, you agree to process your personal information and confirm that you have had the opportunity to learn about our handling of your data.
Guaranteed reply to all applicants!
