Hybrid Systems Engineer, Identity

at INTREAL

• Job title: Systems Engineer, Identity
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Azure
• Location requirements: Hybrid, Hamburg, Germany

About the role

• Systems Engineer developing IAM/IGA for M365 workloads at INTREAL. Managing Active Directory and implementing Zero-Trust principles.

Responsibilities

• Operation and further development of Microsoft Entra ID/Azure AD and on‑premises Active Directory
• Implementation of IAM/IGA: RBAC/ABAC, Conditional Access, MFA/Passwordless, PIM
• Integration of M365 workloads (Exchange Online, SharePoint Online, Teams), app registrations/enterprise apps
• Operation and hardening of the PKI (ADCS): templates, auto‑enrollment, certificate lifecycle
• Planning, deployment and operation of Remote Desktop Services including RD Gateway
• PowerShell automation
• Identity & Access Management (currently Tools4ever)
• Ongoing enhancements and renewals
• Troubleshooting & monitoring
• Implementation of Zero Trust and least‑privilege, recertifications, de‑provisioning

Requirements

• Several years of hands‑on experience with hybrid identity (Entra/AD), M365 (EXO/SPO/Teams) and RD Gateway/RDS operations
• Deep PKI/ADCS knowledge (certificate templates, auto‑enrollment, CRL/OCSP, key rollover); ideally experience with CBA
• Strong PowerShell skills
• Solid understanding of IAM/IGA concepts (RBAC/ABAC, Conditional Access, MFA/Passwordless, PIM)
• Confident understanding of authentication/federation standards (SAML, OAuth2, OIDC) and app registrations
• Structured, self‑directed working style, high reliability, clear communication in German and English

Benefits

• Work‑life balance: Flexible working hours with trust‑based time, option for home office or mobile working, plus 30 days' vacation
• Location & facilities: Central city‑centre location and modern office facilities
• Mobility: Subsidized Deutschlandticket and bike leasing via JobRad
• Stability: Economic stability through secure, proven business models and company pension scheme
• Onboarding & training: Structured onboarding, dedicated contacts, feedback meetings, individual training via our internal learning platform Campus and external seminars
• Team spirit: Open, helpful team; group‑wide networking via company and team events and several corporate sports groups
• Extensive sports offering: Discounted access to many gyms, swimming pools and other sports providers across Germany via EGYM Wellpass
• Additional perks: Employee discounts at various online shops, plus free organic fruit and cold and hot beverages