Security & IAM Engineer

At Frank Energie we're looking for a Security & IAM Engineer to join our team.

Frank Energie is a rapidly growing company located in the Amsterdam Zuidas district. We are revolutionizing the energy market, accelerating the energy transition, and making affordable sustainable energy accessible to everyone. We are young and ambitious, and we want to move fast. Working towards a greener world. We are already a major player in the Netherlands and are on the verge of conquering the rest of Europe.

We expanded to Belgium, Spain and France. This year, we are heading to Denmark. Will you join us on this journey? Your job will be challenging, but for an ambitious person like you, definitely achievable. Your learning curve will be steep, and the growth opportunities are limitless. In addition to hard work, we also believe in relaxation and team-building activities - work hard, play hard.

We are looking for a Security & IAM Engineer who will own identity, access and security controls across our entire technology landscape - from Microsoft 365, Entra  Intune, to Google Cloud and Big Query, to the infrastructure estate behind our platform, managed databases, automation tooling).

This is a controls and operations role: you operate, review, document and report on security controls, rather than owning production infrastructure changes or application architecture. You will build the automation and inventories that make these controls scale, and you’ll be the person who keeps NIS2 compliance grounded in evidence rather than paperwork.

We are looking for someone who is comfortable owning a broad domain independently, who prioritises pragmatically, and who is a real team player.

Your work spans three connected domains:
Microsoft identity & device management, Google Cloud IAM, and security & platform operations across our infrastructure. In practice, that includes:

• Managing Conditional Access, Entra , Intune device compliance, SSO/MFA policies, and the joiner-mover-leaver lifecycle for Microsoft 365;
• Administering IAM roles and permissions in Google Cloud and Big Query, including service account lifecycle and access reviews for customer and PII data across our five markets;
• Owning network access control, firewall and VPC configuration as code, and cloud/SaaS platform RBAC;
• Maintaining the certificate and device identity lifecycle, including mTLS certificates for market integrations;
• Running vulnerability and patch management across endpoints, infrastructure and the application stack;
• Maintaining our infrastructure automation platform (Semaphore, Ansible, Terraform) and the security primitives it manages;
• Maintaining backup, restoring after incidents, disaster recovery evidence, and coordinating recovery exercises;
• Centralising audit logging and owning security and compliance monitoring, with first-line triage and routing of platform alerts;
• Delivering the evidence and figures behind our NIS2 security control reporting;

You have solid experience across identity, security and infrastructure operations. You know how to adapt and react quickly to new situations, have the courage to make decisions, and are energetic, independent, and driven to perform - essential in an environment that changes faster than most.

• You are eager and fully committed, working independently, proactively, and structured, and take ownership of your projects;
• You have ~ 5 years of relevant experience and want to grow further with Frank Energie;
• You have hands-on experience with MS Entra , Intune and Conditional Access (must);
• You have experience with IAM on a major cloud platform, ideally Google Cloud / Big Query (is a plus);
• You are comfortable with infrastructure-as-code and…