Infrastructure Engineer

📣 Would you like to join a company that puts people at the heart of its concerns? We are waiting for you! Since 2007, Extia, an IT consulting company, has been offering a unique approach in its field by combining well-being at work and performance.

Our philosophy at Extia is “First who, then what", so let's go for it.

🚀First who?

• Collaborative & Strategic: You have a product owner mindset, with excellent capacity to work cross-functionally and manage relationships with stakeholders and managed services partners.
• Problem Solver: You possess excellent analytical and problem-solving abilities to navigate complex enterprise environments.
• Communicator: You are fluent in English, enabling you to gather requirements, prioritize features, and deliver value effectively.

The role is requiring 1 day per week in the office (Bucharest).

🚀Then what?

Infrastructure Engineer (EntraID & AD Expert) acting as an internal Product Owner within our Identity team, with the following tasks:

• Design, manage, and optimize Entra ID & AD architecture, including hybrid identity, conditional access, and identity governance.
• Act as the enterprise-wide Subject Matter Expert (SME) and Product Owner, defining the EntraID roadmap in alignment with security, compliance, and "Digital Workplace" strategies.
• Lead major initiatives, such as the migration from Active Directory to EntraID for workstations.
• Develop and enforce identity lifecycle policies, including provisioning, de-provisioning, and Role-Based Access Control (RBAC).
• Guide, manage, and monitor the partner in charge of AD/Entra managed services for daily operations.
• Collaborate closely with cybersecurity, infrastructure, and application teams to ensure secure, compliant identity solutions and support audits.
• Propose and lead initiatives aimed at improving identity lifecycle management, access governance, and user experience.

Required technical skills:

• Deep, hands-on experience with Microsoft EntraID / Azure AD and the broader Azure ecosystem in complex enterprise environments.
• Mastery of hybrid identity integration between on-premise AD and EntraID.
• Excellent knowledge of identity federation protocols (SAML, OAuth, OpenID Connect), MFA, and conditional access policies.
• Strong experience in PowerShell scripting for automating identity-related tasks.
• Proficiency in Microsoft Intune, Defender for Endpoint, and Microsoft 365 security tools.

Nice to have:

• Strong knowledge of legacy on-premise Active Directory.
• Knowledge of identity governance and PIM (Privileged Identity Management).
• Relevant Microsoft certifications (e.g., SC-300, AZ-500, MS-102).

🚀 Do you recognize yourself in the "Who" and represent the "What"? Apply and let's talk!