IN SHORT
We are looking for an experienced Directory Service Lead Engineer to help shape and operate SEFE’s Microsoft identity environment. You will take technical ownership of Active Directory and Microsoft Entra ID, lead identity architecture and migration activities, drive automation and security improvements, and act as an escalation point for complex IAM issues. You will also provide technical guidance and mentoring to other engineers.
WHAT WILL YOU DO
Architecture & Strategy
- Technical Lead for architecture of Active Directory, Entra ID and identity services in close coordination with security and cloud architecture.
- Design and improve identity governance, lifecycle management, access reviews and privileged access (PIM/PAM).
- Evaluate and introduce new IAM technologies and tools where they improve security, automation, or operational efficiency.
- Plan and deliver AD consolidations, tenant and cloud migrations, including Quest Migration Manager and Directory Sync.
Operation & Security
- Operate and improve Active Directory, including replication, GPOs, schema, delegation and SPNs.
- Manage Entra ID capabilities including AD Connect/Cloud Sync, Conditional Access, PIM and Identity Protection.
- Integrate identity services with platforms such as One Identity and ServiceNow.
- Define security and operational standards, ensure GDPR and ISO 27001 compliance, and maintain disaster recovery and emergency concepts for directory services.
Automation & Tooling
- Develop and maintain identity lifecycle automation using PowerShell and Azure Automation.
- Contribute to Infrastructure as Code initiatives using Terraform or Ansible in coordination with the cloud team.
Leadership & Collaboration
- Provide technical leadership for the identity environment and act as a trusted partner to architecture and security teams.
- Mentor engineers and act as a technical escalation point for complex identity issues.
- Partner with security, network, cloud and application teams.
- Work with stakeholders to gather requirements and provide technical solution consulting.
- Maintain architecture, operating concepts and standard documentation.
WHAT WILL YOU BRING
Essential
- At least 5 years of experience with Microsoft Active Directory, including migrations.
- Strong Microsoft Entra ID knowledge, including AD Connect/Cloud Sync, Conditional Access, Enterprise Apps, SCIM and PIM.
- Experience with Privileged Access Management (PAM), such as One Identity or comparable solutions.
- Strong PowerShell automation skills for AD and identity processes.
- Experience planning and implementing AD or tenant migrations.
- Experience with Quest Migration Manager and Directory Sync.
- Practical experience in identity governance and identity lifecycle management.
- Fluent German (C1) and confident English (B2+).
Desirable
- Entra ID Protection, Microsoft Defender for Identity, Log Analytics or Microsoft Sentinel.
- ServiceNow and IAM/ITSM integration.
- Terraform or Ansible in an identity or cloud environment.
- Microsoft certifications such as AZ-104, SC-300, AZ-500 or SC-100.
- Knowledge of ISO/IEC 27001, NIST and experience in regulated environments, particularly energy, finance or KRITIS.
- Previous technical mentoring, coaching or professional leadership experience.
ABOUT US
SEFE is an international energy company anchored in Europe, delivering energy solutions that ensure reliable and affordable supply. Our activities span the entire energy value chain – from origination and trading to sales, transport and storage. With decades of trading expertise and a growing LNG portfolio, SEFE is one of Europe’s leading suppliers to industrial customers, providing more than 200 TWh of gas and power each year. We supply over 50,000 clients, from small businesses to municipalities and multinational organisations. By investing in clean energies, we support our customers on their decarbonisation journey and contribute to the energy transition. SEFE employs over 2,000 people worldwide and is owned by the Federal Government of Germany.
Our international teams work across locations in Europe, Asia, and North America. We’re passionate about energy and the important role it can play in shaping a better future.
Securing energy – now and for the future.
OUR BENEFITS
We stand for an inclusive environment that promotes diversity and supports and values the development of knowledge and skills. Regardless of your position, we offer you plenty of creative freedom and a pleasant atmosphere that encourages you to get involved and think outside the box. In addition, there are numerous company benefits, such as:
- Flexible working hours with the option of hybrid working.
- Attractive remuneration package.
- Appealing working environment in a central location.
- Team-oriented environment with an open feedback culture.
- Company restaurant with a healthy and varied selection of food.
- Job ticket and bike leasing.
- Pension and company sports programmes.
- Company pension scheme.
- 30 days of holiday plus special leave.
#LI-KP1