SecOps Engineer - Active Directory (m/w/d)

About the Role

As a SecOps Engineer (m/f/d), you will shape the daily operations of our Active Directory (AD) service for our Private Cloud Platform. Together with an agile team, you will ensure the stability and security of our identity platform while paving the way for innovative, scalable cloud solutions. If you are passionate about driving automation, feel at home in the cloud, and simultaneously understand the foundation of classic IT systems, then you are exactly right with us.

Responsibilities

• Independent conception, design, documentation, and further development of secure and scalable AD solutions in cloud environments
• Ensuring security standards (e.g., BSI Grundschutz), best practices, and further development and optimization of the AD solutions architecture with a focus on automation and technical security and operational aspects (AD hardening)
• Implementation and monitoring of security measures to minimize risks in the AD area
• Ensuring the smooth operation, high availability, and performance of our AD service in a private cloud environment
• Automation of routine tasks (e.g., provisioning, patching, monitoring) using scripting (PowerShell, Python) and CI/CD pipelines (e.g., GitLab CI/CD, ArgoCD)
• Creation, management, testing, and evaluation of GPOs

Requirements

• Completed IT-related degree or completed vocational training
• At least 2 years of relevant professional experience in an enterprise environment with AD architectures and the conception of IT solutions in cloud environments after graduation (at least 5 years after training)
• Practical experience with Infrastructure as Code (IaC), ideally with Terraform or Ansible
• Knowledge in the setup and operation of CI/CD pipelines for the automation of infrastructure and applications
• Experience with agile working methods such as Scrum, Kanban, and SAFe
• In-depth knowledge of scripting languages such as PowerShell, Python, or comparable scripting languages for automating AD processes and cloud deployments
• Openness and interest in cloud-native authentication and authorization topics with e.g. Keycloak, Teleport
• Meticulous work approach, high degree of initiative, and customer orientation
• Strong willingness to learn, communication skills tailored to the audience, presentation skills, and teamwork ability

About the Company

The BWI GmbH is the primary digitalization partner of the Bundeswehr. It is one of the largest IT service companies in Germany. In peace, crisis, and war, it provides stable, secure, and efficient IT services for the Bundeswehr, both domestically and abroad. In doing so, it contributes to the continuous increase of the command and operational capabilities as well as the combat power of the armed forces.

Since its founding in 2006, BWI has enormously expanded its service portfolio. It provides competent consulting. It also rapidly develops new IT solutions for the Bundeswehr – "innovative by design". And it is a central force in the establishment and expansion of a resilient partner ecosystem.

As an attractive employer, BWI attracts and retains highly qualified personnel who advance Bundeswehr IT out of conviction. Nearly 7,000 employees nationwide now stand behind BWI's vision as a "Team of Teams": to ensure IT for the Bundeswehr and thus Germany's digital future viability.