Active Directory Engineer

About the role

ING Hubs Spain is looking for an Active Directory Engineer to join its Directory and Identity Services team. You will design, operate and secure Active Directory Domain Services (AD DS) in a hybrid environment integrated with Entra ID, working closely with security and infrastructure teams to build secure, scalable and resilient identity solutions in a highly regulated environment.

Key responsibilities

• Manage, operate and maintain on-premises AD DS environments, ensuring stability, security and availability
• Handle user, group and access lifecycle management, including role-based groups and delegation models
• Support hybrid identity integration between on-prem AD DS and Microsoft Entra ID, including sync and authentication troubleshooting
• Work with cloud, security and DevOps teams on identity infrastructure solutions
• Support infrastructure as code practices (e.g. Terraform) for standardised, repeatable deployments
• Improve operational processes, documentation and automation for identity services
• Apply Active Directory, identity and security best practices in daily work

Required profile

• At least 4-5 years of hands-on experience owning and operating on-premises AD DS in enterprise-scale environments
• Personal management and support of production AD environments
• Strong Windows Server expertise (2016 to 2022), including domain controller lifecycle and patching strategies
• Hands-on experience with Microsoft Entra ID in hybrid identity environments
• Understanding of identity security concepts such as privileged access, least privilege and attack surface reduction
• Comfortable in Agile / DevOps teams, with clear communication with engineers, security teams and stakeholders
• Fluent English (minimum B2)

What we offer

• Flexible working: choose which days you work from home and which you come to the ING MAD office
• Restaurant card
• Health insurance for you and your family, and life insurance
• Flexible remuneration model with additional services such as nursery, transport card and training aids
• Transport allowance
• Pension plan after 1 month