Active Directory Engineer

At ING Hubs Spain we are looking for an Active Directory Engineer! Your role and work environment:

We are looking for a talented and enthusiastic Active Directory Engineer to join our Directory and Identity Services team at ING Hubs Spain
. In this role, you will design, operate, and secure Active Directory Domain Services (AD DS) in a hybrid environment integrated with EntraID. You will work closely with security and infrastructure teams to build secure, scalable, and resilient identity solutions for a highly regulated environment.

• You have at least 4–5 years of hands‑on experience owning and operating on‑premises Active Directory Domain Services (ADDS) in enterprise‑scale environments.
• You have personally managed and supported production Active Directory environments, not just contributed to them.
• You have strong Windows Server expertise (2016 to 2022), including domain controller lifecycle management and patching strategies.
• You have hands‑on experience with Microsoft Entra  hybrid identity environments.
• You understand identity security concepts such as privileged access, least privilege, and attack surface reduction in Active Directory environments.
• You are comfortable working in Agile / Dev Ops teams, taking ownership of identity‑related deliverables and technical decisions.
• You communicate clearly and confidently with other engineers, security teams, and stakeholders.
• Your level of English is fluent (minimum B2 level).

• Manage, operate, and maintain on‑premises Active Directory Domain Services (AD DS) environments, ensuring stability, security, and availability.
• Perform user, group, and access lifecycle management, including role‑based group structures and delegation models.
• Support and operate hybrid identity integrations between on‑prem AD DS and Microsoft Entra , including synchronization and authentication troubleshooting.
• Collaborate with cloud, security, and Dev Ops teams to define and implement identity‑related infrastructure solutions.
• Support the use of infrastructure as code (IaC) practices (e.g. Terraform) to enable standardized and repeatable deployments.
• Help improve operational processes, documentation, and automation related to identity services.
• Stay up to date with Active Directory, identity, and security best practices, applying them pragmatically in day‑to‑day operations.

Our model is all about flexibility and accountability. Determining together which days you work from home and which you come to ING MAD to offer your best self.

So that thinking about what to have for lunch doesn’t take up your time or your cravings.

In our offices you can find electric mobility solutions, doctor, hairdresser, gym, The Good Service (to help you with your errands) and much more!

For you and all your family (spouse/partner and children).

We help you protect what matters most to you.

In addition, you will enjoy our flexible remuneration model, through a more tax‑advantaged way, you will be able to access other services such as nursery, transport card, training aids…

It doesn't matter where you live, we’ll help you get to the office.

You can benefit from our pension plan after 1 month with us!