IT Architect (f/m/d) Active Directory & Identity Security

emagine Polska is recruiting for an IT Architect role located in Maia, focusing on Active Directory and Identity Security architecture, integration, and automation. The position involves working across multiple geographic locations and cooperating with IAM, security, and infrastructure teams.

• Over 5 years of experience in Active Directory and Entra ID architecture both on-premises and hybrid.
• Strong experience in identity security design including Tier model, Privileged Access, and admin isolation.
• Experience integrating AD/Entra ID into IAM systems and processes such as JML, SCIM, and role models.
• Hands-on experience with PowerShell and automating identity workflows.
• Solid understanding of hybrid identity and Exchange architecture (excluding operational Exchange role).
• Experience working in enterprise environments with multiple countries or tenants.
• Ability to lead technical topics across teams and take ownership of decisions.
• Proficient in English and German (minimum B2/C1).

• Design and evolve Active Directory and Entra ID architecture including Tiering, PAW, RBAC, and Least Privilege.
• Define and enforce identity security standards such as Tier 0 protection, admin concepts, and access models.
• Integrate AD and Entra ID into IAM processes including Joiner-Mover-Leaver and SCIM provisioning.
• Drive automation of identity processes using PowerShell and workflow tools.
• Support and guide implementation teams during complex or critical changes.
• Collaborate with IAM, security, and infrastructure teams across countries.
• Own architecture decisions for identity topics like Remote Mailbox and hybrid authentication.
• Ensure governance and documentation for identity architecture and security controls.

This role requires clear communication in English and German (minimum B2/C1). Candidates should be willing to engage with international teams.