Senior Identity & Directory Services Engineer

Driven by transformative digital technologies and trends, we are RIB and we’ve made it our purpose to propel the industry forward and make engineering and construction more efficient and sustainable. Built on deep industry expertise and best practice, and with our people at the heart of everything we do, we deliver the world's leading end-to-end lifecycle solutions that empower our industry to build better.

With a steadfast commitment to innovation and a keen eye on the future, RIB comprises over 2,500 talented individuals who extend our software’s reach to over 100 countries worldwide. We are experienced experts and professionals from different cultures and backgrounds and we collaborate closely to provide transformative software products, innovative thinking and professional services to our global market. Our strong teams across the globe enable sustainable product investment and enhancements, to keep our clients at the cutting-edge of engineering, infrastructure and construction technology.

We know our people are our success – join us to be part of a global force that uses innovation to enhance the way the world builds.

Find out more at RIB Careers.

Position: Senior Identity & Directory Services Engineer
Experience Required: 5 Years
Location: Nashik, India

Key responsibilities

• Architecture & Standards: Own and evolve the global identity architecture (AD DS, Entra ID, hybrid identity), including target state, technical guardrails and roadmap
• Hybrid Identity: Entra Connect/Cloud Sync, attribute & identity design, naming conventions, stability, scalability and resilience
• AD DS & GPO Engineering: Tiering model, OU/delegation design, GPO design & hardening, structured rollouts, baselines, lifecycle refactoring
• Security & Compliance: Implement Zero Trust principles, least privilege, separate admin accounts, MFA/Conditional Access, privileged access (e.g., PIM/PAM), logging/monitoring and traceable change evidence
• Identity Governance: Join/Move/Leave, role/group models, access reviews, recertifications, continuous process/tool improvements
• Automation: PowerShell/Graph automation, runbooks, self-service patterns, high-quality technical documentation
• Engineering Ownership: 2nd - 3rd-level troubleshooting, root cause analysis, problem/change management, close collaboration with Security, Infrastructure, HR/People and Application Owners

Your profile

• 5+ years of hands-on enterprise experience with Active Directory (design, hardening, troubleshooting) and GPO engineering
• Strong experience with Microsoft Entra ID (users/groups/roles, RBAC, Conditional Access, Identity Protection, hybrid identity)
• Solid understanding of IAM (lifecycle, role/permission models, governance, audit requirements)
• Experience with Windows/server platforms and Azure administration including security controls
• Strong automation/scripting skills (PowerShell; ideally Microsoft Graph) and standardization/documentation mindset
• English at least C1 - C2 (spoken and written)

Required certifications

• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-800/AZ-801)
• Experience in global/matrix organizations, stakeholder management, and cross-region standardization

Nice to have

• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• SSO/Federation (SAML/OIDC/OAuth2), ADFS/3rd-party IdPs, PKI/certificates, secrets/key management

RIB may require all successful applicants to undergo and pass a comprehensive background check before they start employment. Background checks will be conducted in accordance with local laws and may, subject to those laws, include proof of educational attainment, employment history verification, proof of work authorization, criminal records, identity verification, credit check. Certain positions dealing with sensitive and/or third party personal data may involve additional background check criteria.

RIB is an Equal Opportunity Employer. We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect. We value diversity and the expertise that people from different backgrounds bring to our business.

Come and join RIB to create the transformative technology that enables our customers to build a better world.