Active Directory Engineer

• Experience with identity governance and privileged access management.
• Experience with AI-assisted engineering or a strong interest in emerging AI technologies.
• Knowledge of modern cybersecurity frameworks and regulatory requirements.
• Experience coaching colleagues and sharing technical knowledge.
• Solid understanding of authentication and authorization protocols such as: Keytab en SCIM
• Experience with Microsoft Entra ID and hybrid identity architectures.
• Experience with cloud platforms such as Azure and/or AWS.
• Excellent written and verbal communication skills in Dutch.

Gross monthly salary between € 5.030 and € 7.183 (scale 09).

• Thirteenth month's salary and 8% holiday allowance

• 10% Employee Benefit Budget

• EUR 1,400 development budget per year

• Hybrid working: balance between home and office work (possible for most roles)

• A pension, for which you can set the maximum amount of your personal contribution

View all our benefits.

As an Active Directory Engineer within Tech4IAM, you will play a key role in one of Rabobank's most critical identity platforms. You will help shape the future of Identity & Access Management by modernizing our Active Directory landscape, strengthening federation services, and enabling secure access for employees, applications, machines, and emerging AI-driven capabilities.

Your work directly impacts all Rabobank employees. Together with your team, you ensure our identity services remain secure, reliable, scalable, and future proof in an increasingly complex digital world.

• Design, maintain, and modernize Active Directory services and infrastructure.
• Manage and optimize federation services including ADFS, SAML, OAuth2, and OpenID Connect.
• Drive hybrid identity solutions across on-premises Active Directory and Microsoft Entra ID.
• Develop automation, tooling, and platform capabilities that improve operational efficiency and user experience.
• Design and deploy identity solutions across Azure, AWS, and on-premises environments.
• Build and improve CI/CD pipelines and infrastructure-as-code capabilities.
• Troubleshoot complex identity and authentication challenges.
• Act as a trusted advisor for product owners, architects, engineers, and business stakeholders.
• Help create a collaborative, positive, and high-performing engineering culture.

Active Directory Engineer

Identity & Access Management (IAM) is a core capability within Rabobank. IAM ensures that people, applications, services, and machines have access to the right resources, at the right time, for the right reasons.

As an Active Directory Engineer, you will be part of the IAM Tribe, responsible for delivering a secure and modern identity fabric across the bank. You will work at the heart of our authentication and identity infrastructure, combining deep Active Directory expertise with modern cloud identity, federation, automation, and AI-related access management challenges.

The world around us is changing rapidly. Geopolitical developments, emerging AI agents, cloud transformation, post-quantum cryptography, and ever-increasing regulatory requirements continuously create new opportunities and challenges. We are looking for someone who is excited by these developments and wants to help define the future of identity within Rabobank.

You will work in a highly skilled and collaborative team where knowledge sharing, innovation, and ownership are key values. We encourage engineers who not only solve technical challenges but also help strengthen the team around them.

• Lead the modernization and decommissioning of legacy identity and authentication solutions throughout the bank.
• Design and improve Active Directory and federation architectures.
• Translate business and security requirements into practical and sustainable technical solutions.
• Support and advise development teams on authentication, authorization, and identity-related integrations.
• Improve automation, monitoring, and operational excellence across identity services.
• Ensure IAM data remains reliable, traceable, and compliant with regulatory frameworks such as DORA and NIS2.

At Rabobank, we believe our best results come from teamwork.

We're looking for someone who enjoys collaborating, sharing knowledge, and supporting colleagues. Someone who brings positive energy, challenges ideas constructively, and helps the team succeed together.

Technical excellence is important, but so is being a team player. We value people who create connections, take ownership, and contribute to a culture where everyone can perform at their best.

You will join a team of experienced identity specialists who are passionate about technology, security, and continuous improvement. Together, we safeguard the digital identity of thousands of Rabobank employees.

• A Bachelor's degree or higher in Computer Science, Information Technology, or a related field.
• Strong experience with Active Directory Domain Services (AD DS) in large enterprise environments.
• Solid understanding of authentication and authorization protocols such as: Kerberos,NTLM, LDAP and SAML.
• A strong automation mindset and experience with infrastructure-as-code and CI/CD practices.
• Excellent analytical and troubleshooting skills.
• Strong communication and stakeholder management skills.
• Excellent written and verbal communication skills in English.

• Being passionate about Identity & Access Management.
• Curious about new technologies and innovation.
• Positive, approachable, and collaborative.
• A natural team player who enjoys helping others succeed.
• Comfortable taking ownership and driving improvements.
• Eager to learn and continuously develop yourself.
• Someone who combines technical depth with the ability to bring people together.