System Engineer Active Directory, Entra ID and PKI (m/f/d)

Around 12,000 employees work in the fields of construction and industry. And that in 29 countries of this world! As a foundation company, Zeppelin Group lives values that go back to aviation pioneers and visionary Ferdinand Graf von Zeppelin. This leads to a unique corporate culture that focuses on “creating power”. Zeppelin’s customer promise “We Create Solutions”. Zeppelin is growing with its tasks. That is why we are looking for people who do not hesitate to go creative ways for new solutions. If you are a team player with a healthy sense of humans and the heart at the right spot, we are happy to receive your application! At the strategic management center Group IT Services of Zeppelin GmbH at the location Garching near Munich or Achim, we are looking for a “System Engineer (m/w/d) Active Directory, Entra ID and PKI” at the closest possible time.

You want to: In your role as “System Engineer (m/w/d) Active Directory, Entra ID and PKI” you are responsible for defining, developing and communicating enterprise-wide IT standards in the area of Directory Services and the central PKI environment.

To do this, you will take the definition and further development of standards and architectures in the Microsoft Entra ID (Azure AD), including identity governance and zero-trust approaches, first set requirements analysis and specify solutions in the Animal-0, Active Directory, PKI and Entra ID areas.

To this end, you will also participate in the security of IT security policies, including the management and operating concept of PKI, as well as Conditional Access strategies, and take on the design, implementation and operation of Conditional Access Policies to secure identities and access.

You are responsible for the implementation of integration work between Active Directory, PKI and Entra ID (e.g. Hybrid Identity, Group Policy, Auto-Registration, Certificate Distribution, App-Integration) as well as IAM-related evaluations, including certificate usage analyses and sign-in and risk analyses in Entra ID.

In addition, you participate in ensuring compliance with PKI and identity-related security standards, support audits and take over the management of (partial) projects including the control of external IT service providers and project partners, in particular in the areas AD, PKI and Identity.

We wish:

Successfully completed studies in the IT field or comparable training

Multiannual professional experience as well as sound knowledge in the design and implementation of complex IT environments, in particular in Active Directory, PKI and Entra ID

Practical experience with PowerShell scripting as well as the automation of AD, PKI and Entra ID operations

Experience in operation and management of a central PKI environment (Certificate Authority, Certificate Templates, CRL/OCSP, Certificate Lifecycle)

Funded knowledge in Microsoft Entra ID (Azure AD), in particular in the fields of conditional access, identity protection and enterprise applications

Experience in the integration of applications via SAML, OAuth2 and OpenID Connect as well as in Application Provisioning (SCIM)

Knowledge of PKI integration with Active Directory and Entra ID (e.g. certificate-based authentication, hybrid identity)

Experiences in hybrid identity architectures (AD Connect, Cloud Sync, CrossTenant)

Knowledge in AD-Tiering, Privileged Access Management (PAM/PIM) and Zero-Trust Architectures

Safe handling of certificate standards (X.509, TLS/SSL) and encryption technologies

Impressed sensitivity for stable and secure IT solutions, especially in the identity and PKI environment

Experience in IT project management as well as safe handling of project management methods (required)

Team orientation and strong analytical and conceptual skills

Very good knowledge of German and English in word and writing

You can look forward to this:

Unique corporate culture: Based on the values of Ferdinand Graf von Zeppelin, we act as a foundation company on a future-oriented, social and sustainable basis.

We are sustainable: We live the protection of the environment and climate. And we are serious about this: by 2030, we will make Zeppelin climate-neutral in current business.

Design playroom: With us you will get the opportunity to drive topics independently.

Growing with Zeppelin: We support you with extensive development opportunities and a versatile training program.

Z Colourful: We work with targeted activities, such as our women's network and our impulse series on the anchoring of diversity and their appreciation at Zeppelin.

Work-life balance: We offer you mobile and flexible work and 30 days vacation. We also have various offers and initiatives related to health, children and care.

Health and Movement: Through our ZFIT initiative you can take part in various theme weeks and yoga classes or lease a company bike.

Occupational pension: We retire your pension.

Reference number: JR_18164