Senior Engineer (IDAM)

Senior Engineer (IDAM) for NCIM, supporting NATO's Enterprise Identity and Access Management services, focusing on Microsoft Identity Manager (MIM), directory synchronization, Active Directory and Federation Services under the direction of the EIDAM Service Delivery Manager.

Main duties include: installing, operating, maintaining and centrally administering MIM, Active Directory and Active Directory Federation Services; diagnosing and resolving complex identity management and synchronization issues, particularly within the MIM Synchronization Engine; handling customer incidents, conducting root-cause analysis and developing new MIM Management Agent rules; planning and implementing maintenance, configuration and installation activities; implementing disaster recovery procedures to protect directory data integrity; developing and maintaining Standard Operating Procedures and recommending continuous service improvements; advising development, operations, security teams, subject matter experts and project managers on identity management and directory synchronization; supporting NATO exercises as required.

Experience and requirements: graduate degree in Computer and Information Systems Technology or equivalent qualification or relevant professional accreditation; IT experience focused on Identity and Access Management; at least 10 years of enterprise experience installing and maintaining Directory Synchronization Services; at least 10 years of expertise implementing and maintaining Active Directory and Federation Services across interconnected and federated domains and forests; ability to manage multiple tasks and projects and collaborate across teams; fluent spoken and written English; NATO COSMIC TOP SECRET security clearance required.

Technical expertise required: Microsoft Identity Manager (MIM administration, particularly the Synchronization Engine in large, multi-forest environments), Directory synchronization (cross-domain Global Address List synchronization), Active Directory and federation (large multi-forest environments, Directory Services and Federation Services), Configuration and security (implementing and troubleshooting AD Group Policies, DNS and group Managed Service Accounts (gMSA)), Programming and scripting (C#, Microsoft PowerShell and VBScript), Operating systems (Windows Server 2016, 2019, 2022 and 2025), Project and software lifecycle (software lifecycle activities and advising technical specialists and project managers throughout delivery).

Assignment conditions: Location Braine-l’Alleud, Belgium — full-time on-site; working conditions normal office conditions, some work outside normal office hours may be required; travel up to 50 TDY within Belgium per year, as stated in the request; unit not specified.