Senior Identity Infrastructure Engineer

Link Group Show all offers

Kraków

Expires Nov 29, 2026

6 days ago

In short

Senior Identity Infrastructure Engineer needed in Krakow for Link Group. Responsibilities include managing Active Directory, Azure Entra ID, ADFS, MFA, and PowerShell automation. Requires enterprise IAM experience, AD/Kerberos/SAML expertise, and cloud identity skills.

Keywords

Active Directory Azure Entra ID ADFS MFA PowerShell Kerberos SAML PKI LDAP OAuth

AI-written summary based on the listing content.

About the Role

We are seeking a highly skilled Authentication & Identity Infrastructure Engineer to join an international Engineering Services division operating across key European financial hubs (including Krakow, Paris, and Brussels). In this role, you will be part of a specialized team dedicated to designing, securing, and maintaining mission-critical identity and access management (IAM) platforms. You will ensure maximum system availability, resilience, and security across a large-scale, complex enterprise environment.

Key Responsibilities

Identity & Directory Management: Oversee, configure, and maintain multi-forest and multi-domain Active Directory (AD) environments, LDAP services, and Microsoft Azure Entra ID (global tenant administration).
Federation & Single Sign-On (SSO): Manage Active Directory Federation Services (ADFS), handling claims, metadata, and token-based authentication to deliver seamless SSO capabilities.
Multi-Factor Authentication (MFA) & Security: Support and enhance MFA solutions, including Windows Hello for Business and RSA SecurID (RSA Authentication Manager).
Architecture & Governance: Develop and review technical architecture designs, establish security baselines for authentication systems, and maintain comprehensive technical documentation.
Automation & Engineering: Leverage PowerShell scripting to automate routine administrative workflows, operational checks, and configuration deployments.
Compliance & Audit Readiness: Participate in security assessments, vulnerability remediations, and internal/external IT audits to meet strict financial sector compliance standards.

Required Technical Skills & Experience

Enterprise Experience: Proven track record of designing, supporting, and troubleshooting complex identity and authentication infrastructures within large-scale enterprise environments.
Core Active Directory: Deep expertise in Active Directory, forest trust architectures, and advanced troubleshooting.
Challenging Authentication Protocols: In-depth understanding of Kerberos, NTLM, SAML, OAuth, and PKI/certificate-based authentication.
Cloud & Hybrid Identity: Hands-on experience configuring and managing Microsoft Azure Entra ID (formerly Azure AD).
Automation: Advanced PowerShell scripting skills for infrastructure automation and management.
General Infrastructure Knowledge: Solid understanding of core IT infrastructure components, including Windows Server OS, virtualization, enterprise networking, and storage systems.

Desirable / Nice-to-Have

Experience managing RSA Authentication Manager / RSA SecurID ecosystems.
Familiarity with ITIL frameworks (Incident, Problem, and Change Management via ServiceNow) and Agile delivery practices.

Soft Skills & Operational Mindset

Strong analytical and root-cause troubleshooting skills under pressure.
Ability to translate complex infrastructure issues into clear, concise summaries for stakeholders.
Collaborative team player with excellent communication skills in English.