Requirement: Cloud Portfolio - Cloud Ops - Senior Engineer (Cloud IAM)
Location: Braine-l'Alleud, BELGIUM
Full Time On-Site: Yes
Time On-Site: 100%
Not to Exceed Rate: 81 EUR
Total Scope of the request (hours): 836
Required Start Date: 18 August 2026
End Contract Date: 31 December 2026
Required Security Clearance: NATO SECRET
Please do NOT apply for any NATO contract positions unless you meet ALL the following criteria:
- Current National or NATO SECRET clearance
- Nationality of one of the NATO member countries
- Current work visa for the specific location if applying for an in-country position
Duties & Role:
- Design, implement, and maintain complex identity and access management architectures in support of enterprise and mission-facing services.
- Develop and manage automation solutions that support identity lifecycle management, provisioning, deprovisioning, access reviews, and operational efficiency.
- Administer and support high volumes of identity objects, roles, groups, and access assignments across Microsoft Entra ID and AWS IAM Identity Center.
- Support and deliver identity provider integrations for web applications and portals, ensuring secure authentication, federation, and MFA-enabled access.
Requirements
Skills, Knowledge & Experience:
- The candidate must have a currently active NATO SECRET security clearance
- At least 5 years of hands-on experience with Microsoft Entra ID (formerly Azure Active Directory), including identity governance, authentication methods, conditional access, and application integration.
- Strong practical experience with AWS IAM and IAM Identity Center, including role-based access control, federation, and access lifecycle management across cloud environments.
- Demonstrated expertise in automation and orchestration using tools such as Azure Logic Apps, Power Automate, Azure Automation, Azure Functions, AWS Lambda, and PowerShell to streamline identity and access management processes.
- Proven experience integrating identity providers with web applications, portals, and external-facing services, including support for modern authentication and multi-factor authentication requirements.
- Solid architectural knowledge of complex IAM designs, including multi-tenant, hybrid, and cross-domain identity solutions.
- Experience with identity synchronisation and federation across multiple tenants, directories, or domains, with an understanding of secure and scalable enterprise identity patterns.
