System Engineer

Identity & Access Specialist – Hybrid Microsoft Environments (Active Directory, Entra ID, SharePoint) We are looking for an experienced Microsoft identity and access specialist to take ownership of group and permission management in a hybrid environment, where on-premises Active Directory and Microsoft cloud services run side by side. The role requires deep, hands-on knowledge of how groups, memberships and permissions behave across two paradigms: traditional on-premises AD and the cloud-based model in Entra ID and Microsoft 365. You will design, clean up and govern group structures, and make sure access to SharePoint and related resources is consistent, secure and maintainable. Must have

• Strong experience with group management in Active Directory (security groups, nesting strategies, OU structures, delegation)
• Strong experience with group management in Entra ID, including security groups, Microsoft 365 groups and dynamic membership
• Proven experience working in hybrid identity environments, including synchronization between on-premises AD and Entra ID (Entra Connect or Cloud Sync)
• Solid experience with SharePoint permissions and access models (SharePoint Online and/or SharePoint on-premises)
• Experience with PowerShell for automation, reporting and bulk operations on identities and groups
• Ability to analyze and troubleshoot permission and synchronization issues in hybrid setups
• Professional proficiency in English

Nice to have

• Experience with Entra ID Governance (access packages, access reviews, lifecycle workflows)
• Experience with Privileged Identity Management (PIM) and Conditional Access
• Experience with Microsoft Graph API for automation
• Experience cleaning up and restructuring legacy group and permission structures
• Experience with documentation of access models and group naming conventions

Key competencies

• Hybrid identity architecture and troubleshooting
• Access and permission model design
• Structured, quality-focused approach to documentation
• Ability to work independently in a complex environment
• Clear communication with both technical and non-technical stakeholders