Active Directory Engineer

Active Directory Engineer 

Job Description 

As an Active Directory Engineer within Tech4IAM, you will play a key role in one of Rabobank's most critical identity platforms. You will help shape the future of Identity & Access Management by modernizing our Active Directory landscape, strengthening federation services, and enabling secure access for employees, applications, machines, and emerging AI-driven capabilities.

Your work directly impacts all Rabobank employees. Together with your team, you ensure our identity services remain secure, reliable, scalable, and future-proof in an increasingly complex digital world.

You & Your Job 

Identity & Access Management (IAM) is a core capability within Rabobank. IAM ensures that people, applications, services, and machines have access to the right resources, at the right time, for the right reasons.

As an Active Directory Engineer, you will be part of the IAM Tribe, responsible for delivering a secure and modern identity fabric across the bank. You will work at the heart of our authentication and identity infrastructure, combining deep Active Directory expertise with modern cloud identity, federation, automation, and AI-related access management challenges.

The world around us is changing rapidly. Geopolitical developments, emerging AI agents, cloud transformation, post-quantum cryptography, and ever-increasing regulatory requirements continuously create new opportunities and challenges. We are looking for someone who is excited by these developments and wants to help define the future of identity within Rabobank.

You will work in a highly skilled and collaborative team where knowledge sharing, innovation, and ownership are key values. We encourage engineers who not only solve technical challenges but also help strengthen the team around them.

What You'll Do

Practical Examples

• Lead the modernization and decommissioning of legacy identity and authentication solutions throughout the bank.
• Design and improve Active Directory and federation architectures.
• Translate business and security requirements into practical and sustainable technical solutions.
• Support and advise development teams on authentication, authorization, and identity-related integrations.
• Improve automation, monitoring, and operational excellence across identity services.
• Ensure IAM data remains reliable, traceable, and compliant with regulatory frameworks such as DORA and NIS2.

Top Responsibilities

• Design, maintain, and modernize Active Directory services and infrastructure.
• Manage and optimize federation services including ADFS, SAML, OAuth2, and OpenID Connect.
• Drive hybrid identity solutions across on-premises Active Directory and Microsoft Entra ID.
• Develop automation, tooling, and platform capabilities that improve operational efficiency and user experience.
• Design and deploy identity solutions across Azure, AWS, and on-premises environments.
• Build and improve CI/CD pipelines and infrastructure-as-code capabilities.
• Troubleshoot complex identity and authentication challenges.
• Act as a trusted advisor for product owners, architects, engineers, and business stakeholders.
• Help create a collaborative, positive, and high-performing engineering culture.

Together We Achieve More Than Alone 

At Rabobank, we believe our best results come from teamwork.

We're looking for someone who enjoys collaborating, sharing knowledge, and supporting colleagues. Someone who brings positive energy, challenges ideas constructively, and helps the team succeed together.

Technical excellence is important, but so is being a team player. We value people who create connections, take ownership, and contribute to a culture where everyone can perform at their best.

You will join a team of experienced identity specialists who are passionate about technology, security, and continuous improvement. Together, we safeguard the digital identity of thousands of Rabobank employees.

You & Your Talent

You Bring

• Bachelor's or Master's degree in Computer Science, Information Technology, or a related field.
• Strong experience with Active Directory Domain Services (AD DS) in large enterprise environments.
• Experience with Active Directory Federation Services (ADFS) and modern federation technologies.
• Solid understanding of authentication and authorization protocols such as:
• Kerberos
• NTLM
• LDAP
• SAML
• OAuth2
• OpenID Connect
• SCIM
• Experience with Microsoft Entra ID and hybrid identity architectures.
• Experience with cloud platforms such as Azure and/or AWS.
• A strong automation mindset and experience with infrastructure-as-code and CI/CD practices.
• Excellent analytical and troubleshooting skills.
• Strong communication and stakeholder management skills.
• Excellent written and verbal communication skills in Dutch and English.

Extra Nice To Have

• Experience with identity governance and privileged access management.
• Experience with AI-assisted engineering or a strong interest in emerging AI technologies.
• Experience designing identity controls for AI agents, machine identities, and non-human identities.
• Knowledge of modern cybersecurity frameworks and regulatory requirements.
• Experience coaching colleagues and sharing technical knowledge.

What Makes You Successful

You are:

• Passionate about Identity & Access Management.
• Curious about new technologies and innovation.
• Positive, approachable, and collaborative.
• A natural team player who enjoys helping others succeed.
• Comfortable taking ownership and driving improvements.
• Eager to learn and continuously develop yourself.
• Someone who combines technical depth with the ability to bring people together.

You & the application process

Reply to the vacancy for DevOps Engineer IAM 4 Employees at Rabobank as soon as possible, open until fulfilment. 

• We will hold the interviews through a video call. 
• If you are selected for an interview, Bo, our virtual assistant, will reach out to you via SMS and email to schedule the interview.
• You can find answers to the most frequently asked questions on rabobank.jobs/en/faq.
• A security check is part of the process.
• We respect your privacy.