R

RIB Software

Subscription-based construction software for lifecycle management

Identity & Access Management Engineer - Active Directory & Microsoft Entra ID

System AdministrationConfirmed live in the last 24 hours
Full-timeStuttgart, GermanyNo salary listed

About the Job

Requirements

  • At least 5 years of professional experience in Identity & Access Management, Active Directory, or Microsoft infrastructure.
  • Strong knowledge of Microsoft Entra ID (Azure AD) and Active Directory.
  • Experience with Group Policies (GPO), permission management, and security hardening.
  • Solid understanding of IAM concepts such as role-based access control (RBAC), least privilege, and identity governance.
  • Experience in the Microsoft 365 environment and good knowledge of Azure and Windows Server administration.
  • A structured, independent, and solution-oriented working style.
  • Strong communication and teamwork skills.
  • Very good German skills (at least C1) and good English skills (at least B2).

Responsibilities

  • Operate, administer, and further develop Active Directory Domain Services (AD DS) and Microsoft Entra ID.
  • Support and optimize hybrid identity solutions as well as synchronization and authentication services.
  • Develop and implement global standards for identity and directory services.
  • Ensure the stability, performance, and security of identity platforms.
  • Manage the full user lifecycle (joiner, mover, leaver).
  • Manage roles, groups, and permission concepts.
  • Conduct regular permission reviews and recertifications.
  • Support governance and least-privilege initiatives.
  • Implement and further develop security measures such as multi-factor authentication (MFA), role-based access models, and administrative security concepts.
  • Support audits and compliance with security requirements.
  • Collaborate with the Security team to continuously improve the identity security strategy.
  • Ensure traceability of identities and access rights through logging and monitoring.
  • Automate recurring tasks using PowerShell, Microsoft Graph, or comparable technologies.
  • Identify and implement opportunities to improve IAM processes.
  • Create and maintain technical documentation and operational standards.
  • Support national and international IT projects in Identity & Access Management.

Desired Qualifications

  • Experience with Privileged Access Management (PAM).
  • Knowledge of Single Sign-On (SSO), SAML, OAuth2, or OpenID Connect.
  • Experience with Conditional Access and modern identity security concepts.
  • Good scripting skills in PowerShell.
  • Microsoft certifications in Azure, Security, Entra ID, or Microsoft 365.
  • Experience in international companies or matrix organizations.
  • Knowledge of Zero Trust architectures and identity governance solutions.

About the Company

RIB Software

Subscription-based construction software for lifecycle management

RIB Software delivers digital software solutions for the construction industry, providing a subscription-based suite that covers the entire project lifecycle from design to operation. Its products include tools for 2D and 3D takeoffs, cost estimation, and project management, all accessed as a service and supported by consulting and training services. The software works by letting users plan, estimate, and manage costs in one connected platform, using data analytics to improve decision-making and resource use. The company differentiates itself by focusing on end-to-end lifecycle management for AEC projects, emphasizing data-driven insights, efficiency, and sustainability rather than standalone point tools. Its goal is to help construction firms, engineers, and project managers complete projects more efficiently, with lower costs and better environmental outcomes.

Company size
1,001-5,000
Company stage
Growth Equity (Venture Capital)
Total funding
$10M
Headquarters
Stuttgart, Germany
Founded
1961

Recently Posted Jobs

Explore more opportunities at RIB Software

See more jobs