IN SHORT
In the IT Infrastructure and Operations department, we are looking for a Team Lead Workplace Engineering (m/f/d) to lead our Workplace Engineering team and take ownership of the technical direction across identity, endpoint, and collaboration platforms at SEFE.
This is a leadership-first role with a hands-on technical anchor in Identity Management: Active Directory and Entra ID are your domain of personal depth. Across the broader Modern Workplace stack — Intune, Microsoft 365, Exchange Online, Teams, SharePoint, AVD — you will provide architectural oversight and steer decisions, supported by strong subject-matter experts already in the team.
You will lead a team of engineers across multiple SEFE locations, working closely with Workplace Operations, SecOps, Cloud, and Network teams. We are looking for someone who combines genuine people leadership with the technical credibility to own identity end-to-end — and who knows when to set direction versus when to trust the experts.
WHAT WILL YOU DO
Leadership & Team Development
- Lead, develop, and mentor the Workplace Engineering team both technically and disciplinarily
- Define the team’s technical direction in alignment with the IT I&O strategy and VP Workplace
- Drive performance management, capability planning, hiring, and onboarding
- Foster a culture of ownership, technical excellence, and constructive feedback
- Act as the main technical and managerial interface for stakeholders and peer teams
Identity & Directory Services – Technical Focus
- Own the architectural direction for Active Directory and Microsoft Entra ID at SEFE
- Drive identity governance including lifecycle management, Conditional Access, PIM, B2B/guest access, and MFA strategy
- Serve as escalation point and design authority for complex AD and Entra topics
- Lead identity initiatives such as migrations, consolidations, hybrid optimization, and automation
- Coordinate with SecOps and Identity Engineers on security controls and compliance requirements
Workplace Platform Oversight
- Provide technical oversight for endpoint platforms (Intune, SCCM, Autopilot, AVD, BitLocker)
- Oversee collaboration and messaging platforms (Exchange Online, Teams, SharePoint, OneDrive)
- Review and approve architectural decisions, governance standards, and high-impact changes
- Enable subject-matter experts by setting priorities, standards, and guardrails
Cross-Team Collaboration & Operational Excellence
- Own the interface between Workplace Engineering and Operations, including handovers and escalation paths
- Drive continuous improvement in automation, standards, and operational efficiency
- Ensure compliance with internal policies, GDPR, ISO 27001, and regulatory requirements
- Manage strategic vendor relationships together with Procurement (e.g. Microsoft, Lenovo, Apple)
WHAT WILL YOU BRING
Must-have
- Several years of experience leading IT engineering teams, ideally in workplace, identity, or infrastructure environments
- Strong expertise in Microsoft Active Directory (replication, schema, GPO, delegation, migrations, troubleshooting)
- Strong knowledge of Microsoft Entra ID (Conditional Access, PIM, Entra Connect/Cloud Sync, MFA, B2B, Identity Governance)
- Experience with identity lifecycle management, automation, and RBAC
- Good understanding of the Microsoft 365 / Modern Workplace stack (Intune, Exchange Online, Teams, SharePoint)
- Ability to prioritize effectively and make decisions under uncertainty
- Intermediate PowerShell skills for administration and automation
- Fluent English skills
Nice-to-have
- German language skills are an advantage
- Experience with identity migrations, PAM solutions (e.g. One Identity), Microsoft Defender for Identity, Sentinel, and Purview
- Microsoft certifications such as SC-300, AZ-104, AZ-500, or SC-100
- Experience with ServiceNow, Terraform, or Ansible in identity/cloud environments
- Knowledge of ISO 27001, NIST, or BSI IT-Grundschutz frameworks
- Experience in regulated industries such as energy, finance, or KRITIS environments
- Experience in technical mentoring and leading distributed teams
ABOUT US
SEFE is an international energy company anchored in Europe, delivering energy solutions that ensure reliable and affordable supply. Our activities span the entire energy value chain – from origination and trading to sales, transport and storage. With decades of trading expertise and a growing LNG portfolio, SEFE is one of Europe’s leading suppliers to industrial customers, providing more than 200 TWh of gas and power each year. We supply over 50,000 clients, from small businesses to municipalities and multinational organisations. By investing in clean energies, we support our customers on their decarbonisation journey and contribute to the energy transition. SEFE employs over 2,000 people worldwide and is owned by the Federal Government of Germany.
Securing energy – now and for the future.
OUR BENEFITS
In return we offer a competitive starting salary supported by a comprehensive range of financial, lifestyle and wellness benefits with the flexibility to follow a hybrid working model.
- bonus earning potential
- non-contributory pension with 10% employer contribution
- 25 days holiday plus bank holidays and volunteering days
- buy / sell holidays
- life assurance
- medical and dental insurance (family cover)
- range of optional flexible benefits
We are committed to supporting your career growth with opportunities to develop both your knowledge and experience through a blended approach to learning.
Join SEFE and help us secure energy supply across Europe and shape a better, more sustainable tomorrow.
#LI-KP1