One of the world's leading energy companies, ENGIE is present across the entire energy chain, in electricity and natural gas, from upstream to downstream. By placing responsible growth at the heart of its businesses (energy, energy services and the environment), its mission is to meet major challenges: meeting energy needs, ensuring security of supply, combating climate change, and optimising the use of resources.

GBS is part of ENGIE, partnering with the support functions for the ENGIE's Business Units and Corporate. It currently has 7 Business Support functions: purchasing, consulting, finance, real estate and logistics, legal, human Resources, information systems. By 2025, GBS is ENGIE's "transition maker" for support function excellence. Amplifying ENGIE's net zero mission, we provide a competitive edge through efficient operations, strategic resource allocation, and pioneering in culture and technology.

What you will do:

As an L2 Identity & Access Back Office Engineer, you will join the Identity Management team within the Global Business Support IT Service Line. Working as part of the Active Directory Control Tower team, you will contribute to the availability, security and compliance of the TES forest by managing identity-related support requests and performing Active Directory back office operations.

Responsibilities:

• Handle and resolve Level 2 identity-related service requests and incidents in line with defined SLAs.
• Manage and qualify tickets through the ITSM tool, escalating issues when required and contributing to root cause analysis.
• Communicate with users and entities throughout the resolution process.
• Administer and maintain the Active Directory infrastructure, including user accounts, security groups, Group Policy Objects (GPOs), Organisational Units (OUs) and trust relationships.
• Monitor Domain Controller health, replication status and DNS configuration.
• Participate in compliance remediation activities and Active Directory security hardening.
• Execute Identity & Access operational activities, including account lifecycle management, access provisioning and de-provisioning, and access reviews.
• Ensure operations are performed in accordance with established procedures, security policies and change management processes.
• Support operational tasks related to AWS and/or Azure environments hosting identity infrastructure.
• Maintain and update operational procedures, runbooks and knowledge base documentation.
• Collaborate with L3 engineering teams, security stakeholders and entity IT teams.
• Participate in agile team activities and manage tasks using a Kanban approach.

Desired education, expertise, and skills: 

• Bachelor's degree in Information Technology, Computer Science or a related field, or equivalent work experience.
• Minimum 3–5 years of experience in an IT back office, support or infrastructure role with a focus on Active Directory.
• Proven experience managing tickets and service requests in a Level 2 support environment.
• Professional proficiency in English, both written and spoken.
• Experience working in a large international IT environment is considered an advantage.
• Microsoft certifications (e.g. AZ-800, MD-102) or equivalent are considered an advantage.
• Solid operational experience with Active Directory and Domain Controllers, including users, groups, GPOs, OUs, replication and DNS.
• Good knowledge of an IT service management tool such as ServiceNow or an equivalent solution.
• Basic to intermediate PowerShell scripting skills for Active Directory administration and task automation.
• Basic understanding of AWS and/or Azure cloud subscription management and hosted infrastructure.
• Working knowledge of identity protocols such as Kerberos, LDAP and NTLM, with awareness of SAML and OAuth2.
• Basic understanding of Active Directory security risks and hardening practices.
• Strong communication skills and ability to explain technical information clearly.
• Service-oriented approach and commitment to providing reliable support.
• Rigorous and methodical way of working, with attention to detail.
• Analytical problem-solving skills.
• Ability to work collaboratively in an international team.
• Adaptability and willingness to learn new identity and cloud technologies.

Benefits:

• Private health insurance for you and your family;
• Opportunities for ongoing personal and professional development;
• Meal tickets;
• Work-life balance;
• Annual extended holiday entitlement, depending on the length of employment.

Only candidates selected for interviews will be contacted.

If you decide to send us your personal information in order to apply for this position, please be aware of our job candidate GDPR Data Privacy Notice: https://www.engie.ro/wp-content/uploads/2022/09/ER_Nota-de-informare-Candidati.pdf.

ENGIE is an Equal Opportunity Employer. Our commitment is unwavering: we do not discriminate based on race, color, age, sex, religion or religious creed, national origin, marital status, gender expression, genetic information, sexual orientation, ancestry, mental or physical disability, military or veteran status, or any other characteristic protected by law.