Senior DevOps Engineer Authentication, Operations Focus

Senior DevOps Engineer Authentication, Operations Focus

Identity & Access Management (IAM) is a core capability for Rabobank. IAM ensures that employees and machines have access to the right resources, at the right time, for the right reasons — in a simple, user‑friendly and secure way. Hopefully you’re smiling when you see how it’s phrased while knowing all the complexity underneath.

You will join the Authentication Squad, formally known as Authentication 4 Employees, within IAM 4 Employees. Our squad is responsible for authentication services used by approximately 48,000 Rabobank employees in 34 countries. These services give employees secure access to their laptops, applications and other Rabobank resources.

This role has a strong operational focus, while you remain active across the full DevOps lifecycle. Your main responsibility is to keep our authentication services reliable, secure, recoverable and demonstrably under control. You will also contribute to engineering changes, automation, lifecycle management, migrations and the controlled decommissioning of services.

Our authentication landscape consists of approximately 75 interconnected software components. Each has its own repository, pipeline, lifecycle and security and compliance requirements. Many components are closely integrated with other services inside and outside the squad. This creates a challenging environment with considerable technical depth. Even experienced team members regularly encounter components they have not worked with before and must quickly understand, troubleshoot or change.

One of our most visible responsibilities is the Security Key service, based on YubiKey technology. Every Rabobank employee has a YubiKey and primarily uses FIDO2 authentication. The squad has worldwide end responsibility for this service. Although parts of its day-to-day execution, such as issuing keys to new employees, are delegated to local teams, we remain responsible for the overall service, technology, processes, integrations, controls and continuity.

Our landscape combines modern and mature authentication technologies. It includes Yubico services, Entra ID Application Proxy, Red Hat Directory Server, Microsoft Identity Manager, Idira Workforce Password Manager, internally developed web applications, RBAC solutions and employee-facing authentication and enrolment portals. These services run across Windows, Linux, Azure, SaaS and on-premises environments.

A substantial part of this landscape consists of mature, business-critical services. Keeping these services secure and available requires careful lifecycle management, structural problem-solving and ongoing automation. At the same time, we are simplifying the landscape and working toward a more unified, passwordless employee authentication experience. Rabobank already uses FIDO2 at scale, while passwords, RSA tokens and other legacy authentication solutions still exist.

Top responsibilities

• Operate, monitor, support and continuously improve business-critical authentication services across cloud, SaaS and on-premises environments.
• Take end-to-end operational ownership, including for services where parts of the execution are delegated to other teams.
• Investigate incidents and recurring problems, identify root causes and implement structural improvements.
• Manage vulnerabilities, compliancy, lifecycle, certificates and secrets to keep our services secure, reliable and demonstrably under control.
• Improve automation, monitoring, alerting, recovery procedures and operational documentation.
• Contribute to engineering changes, migrations and infrastructure as code, and participate in the on-call rotation.

Our technical landscape

You will work in a diverse hybrid environment with around 75 interconnected software components, each with its own lifecycle, dependencies and security requirements. Our core technology landscape includes:

• Identity & authentication: Entra ID, Active Directory, Microsoft Identity Manager, Red Hat Directory Server, FIDO2, LDAP, Kerberos, SCIM and single sign-on
• Authentication solutions: Yubico services, Idira Workforce Password Manager
• Platforms: Windows, Red Hat Enterprise Linux, Azure, SaaS and on-premises environments
• Automation & infrastructure: PowerShell, YAML and Terraform
• CI/CD: Azure DevOps and Azure Pipelines

Some components are mature or legacy and will be modernized, migrated, replaced, or decommissioned over time. This makes the ability to quickly understand unfamiliar and interconnected systems important.

Together we achieve more than alone

We believe in the power of difference. Bringing together different perspectives and experiences makes us an even better bank. We are therefore curious about what you can bring to the Authentication Squad and the wider IAM department.

Our squad consists of nine engineers, including a lead engineer. Together with our Product Owner and Scrum Master, we form a multidisciplinary team with end-to-end responsibility for our services.

Talking of Rabobank: we are a Dutch bank that operates internationally for millions of customers. Together with our customers, members and partners, we work to create a world in which everyone has access to enough healthy food.

You & your talent

You are an experienced engineer who enjoys taking operational ownership in a complex technical environment. You bring strong operational expertise and help raise the operational maturity of the squad.

What you bring

• Several years of hands-on operations experience in a complex, business-critical IT environment, taking ownership of critical services and operational issues.
• Strong analytical and problem-solving skills, with the ability to understand unfamiliar, interconnected systems, troubleshoot issues across system boundaries and drive structural improvements.
• Experience with Windows and Linux in hybrid environments and a good understanding of infrastructure, networking and security principles.
• Experience with identity and authentication technologies and concepts such as Active Directory, Entra ID, LDAP, FIDO2 or single sign-on.
• Some hands-on experience with PowerShell, with the ability to understand, use and troubleshoot automation scripts.
• A strong sense of ownership and proactivity. You take responsibility for operational issues, involve the right people when needed and follow problems through to a structural solution.
• A practical DevOps mindset, combining operational responsibility with automation, engineering changes and continuous improvement.
• Professional proficiency in English.

Nice to have

Experience with one or more of the following is an advantage:

• YubiKeys, FIDO2 or passwordless authentication
• Red Hat Enterprise Linux or Red Hat Directory Server
• Microsoft Identity Manager
• Idira Workforce Password Manager
• Entra ID Application Proxy
• Terraform and infrastructure as code
• Azure DevOps and Azure Pipelines
• Certificate and secrets-management automation
• Disaster recovery and continuity testing
• Monitoring and observability
• Dutch language skills, or a willingness to learn Dutch

You & the application process

Reply to the vacancy for DevOps Engineer IAM 4 Employees at Rabobank as soon as possible, open until fulfilment. 

• Any questions about working at Rabobank and the process? Sylvana Janssen, recruiter via sylvana.janssen@rabobank.nl.
• We will hold the interviews through a video call. 
• If you are selected for an interview, Bo, our virtual assistant, will reach out to you via SMS and email to schedule the interview.
• You can find answers to the most frequently asked questions on rabobank.jobs/en/faq.
• A security check is part of the process.
• We respect your privacy.