Senior Devops Engineer Authentication

Reply to the vacancy for DevOps Engineer IAM 4 Employees at Rabobank as soon as possible, open until fulfilment.

• Any questions about working at Rabobank and the process? , recruiter via .
• We will hold the interviews through a video call.
• If you are selected for an interview, Bo, our virtual assistant, will reach out to you via SMS and email to schedule the interview.
• You can find answers to the most frequently asked questions on rabobank.jobs/en/faq .
• A security check is part of the process.
• We respect your privacy. Dit is ons standaard sollicitatieproces. Het proces kan per rol verschillen. Leuk dat je solliciteert! Wij nemen alle cv’s en brieven door en laten zo snel mogelijk weten of we je uitnodigen voor een gesprek. We nodigen je uit voor één of meerdere (online) gesprekken. We willen weten of je bij de functie en het team past. En jij hebt vast ook veel vragen aan ons. Bij sommige functies vragen we je ook om een opdracht of assessment te doen. Stap 3 Ons aanbod Ben jij de nieuwe collega die we zoeken en word jij ook blij van ons? Dan krijg je een goed aanbod van ons. Voordat je bij ons start, voeren we eerst een wettelijke screening uit. Zo zorgen we ervoor dat onze medewerkers geen risico vormen voor ons en onze klanten. We kijken uit naar jouw komst en kunnen niet wachten om samen te werken. Senior DevOps Engineer Authentication, Operations Focus Skills AWS Cloud Computing / Digitale geletterdheid / Gedisciplineerde uitvoering / Informatietechnologie-strategieën / Informatietechnologiebeveiliging / Oplossingsarchitectuur / Professionele samenwerking / Softwareontwikkeling / Technische ondersteuning / Testautomatisering / Veranderingsvermogen

You are an experienced engineer who enjoys taking operational ownership in a complex technical environment. You bring strong operational expertise and help raise the operational maturity of the squad.

• Several years of hands-on operations experience in a complex, business-critical IT environment, taking ownership of critical services and operational issues.
• Strong analytical and problem-solving skills, with the ability to understand unfamiliar, interconnected systems, troubleshoot issues across system boundaries and drive structural improvements.
• Experience with Windows and Linux in hybrid environments and a good understanding of infrastructure, networking and security principles.
• Experience with identity and authentication technologies and concepts such as Active Directory, Entra ID, LDAP, FIDO2 or single sign-on.
• Some hands-on experience with PowerShell, with the ability to understand, use and troubleshoot automation scripts.
• A strong sense of ownership and proactivity. You take responsibility for operational issues, involve the right people when needed and follow problems through to a structural solution.
• A practical DevOps mindset, combining operational responsibility with automation, engineering changes and continuous improvement.

• Professional proficiency in English. Experience with one or more of the following is an advantage:

• YubiKeys, FIDO2 or passwordless authentication
• Red Hat Enterprise Linux or Red Hat Directory Server
• Idira Workforce Password Manager
• Entra ID Application Proxy
• Terraform and infrastructure as code
• Certificate and secrets-management automation
• Disaster recovery and continuity testing
• Dutch language skills, or a willingness to learn Dutch

Dit is puur een indicatie of deze vacature bij jouw skills past.

• Salary : Gross monthly salary between EUR 4,105 and EUR 5,862 (scale 08) for a 36-hour work week .
• Extras : a thirteenth month, 8% holiday allowance, and a 10% Employee Benefit Budget.
• Development budget : EUR 1,400 development budget per year for your growth and development.
• Hybrid working : a balance between home and office work (possible for most roles).

• Pension : decide for yourself the amount of your personal contribution. Senior DevOps Engineer Authentication, Operations Focus Identity & Access Management (IAM) is a core capability for Rabobank. IAM ensures that employees and machines have access to the right resources, at the right time, for the right reasons - in a simple, user-friendly and secure way. Hopefully you’re smiling when you see how it’s phrased while knowing all the complexity underneath. You will join the Authentication Squad, formally known as Authentication 4 Employees, within IAM 4 Employees. Our squad is responsible for authentication services used by approximately 48,000 Rabobank employees in 34 countries. These services give employees secure access to their laptops, applications and other Rabobank resources. This role has a strong operational focus, while you remain active across the full DevOps lifecycle. Your main responsibility is to keep our authentication services reliable, secure, recoverable and demonstrably under control. You will also contribute to engineering changes, automation, lifecycle management, migrations and the controlled decommissioning of services. Our authentication landscape consists of approximately 75 interconnected software components. Each has its own repository, pipeline, lifecycle and security and compliance requirements. Many components are closely integrated with other services inside and outside the squad. This creates a challenging environment with considerable technical depth. Even experienced team members regularly encounter components they have not worked with before and must quickly understand, troubleshoot or change. One of our most visible responsibilities is the Security Key service, based on YubiKey technology. Every Rabobank employee has a YubiKey and primarily uses FIDO2 authentication. The squad has worldwide end responsibility for this service. Although parts of its day-to-day execution, such as issuing keys to new employees, are delegated to local teams, we remain responsible for the overall service, technology, processes, integrations, controls and continuity. Our landscape combines modern and mature authentication technologies. It includes Yubico services, Entra ID Application Proxy, Red Hat Directory Server, Microsoft Identity Manager, Idira Workforce Password Manager, internally developed web applications, RBAC solutions and employee-facing authentication and enrolment portals. These services run across Windows, Linux, Azure, SaaS and on-premises environments. A substantial part of this landscape consists of mature, business-critical services. Keeping these services secure and available requires careful lifecycle management, structural problem-solving and ongoing automation. At the same time, we are simplifying the landscape and working toward a more unified, passwordless employee authentication experience. Rabobank already uses FIDO2 at scale, while passwords, RSA tokens and other legacy authentication solutions still exist.

• Operate, monitor, support and continuously improve business-critical authentication services across cloud, SaaS and on-premises environments.
• Take end-to-end operational ownership, including for services where parts of the execution are delegated to other teams.
• Investigate incidents and recurring problems, identify root causes and implement structural improvements.
• Manage vulnerabilities, compliancy, lifecycle, certificates and secrets to keep our services secure, reliable and demonstrably under control.
• Improve automation, monitoring, alerting, recovery procedures and operational documentation.

• Contribute to engineering changes, migrations and infrastructure as code, and participate in the on-call rotation. You will work in a diverse hybrid environment with around 75 interconnected software components, each with its own lifecycle, dependencies and security requirements. Our core technology landscape includes:

• Identity & authentication: Entra ID, Active Directory, Microsoft Identity Manager, Red Hat Directory Server, FIDO2, LDAP, Kerberos, SCIM and single sign-on
• Authentication solutions: Yubico services, Idira Workforce Password Manager
• Platforms: Windows, Red Hat Enterprise Linux, Azure, SaaS and on-premises environments
• Automation & infrastructure: PowerShell, YAML and Terraform
• CI/CD: Azure DevOps and Azure Pipelines Some components are mature or legacy and will be modernized, migrated, replaced, or decommissioned over time. This makes the ability to quickly understand unfamiliar and interconnected systems important. We believe in the power of difference. Bringing together different perspectives and experiences makes us an even better bank. We are therefore curious about what you can bring to the Authentication Squad and the wider IAM department. Our squad consists of nine engineers, including a lead engineer. Together with our Product Owner and Scrum Master, we form a multidisciplinary team with end-to-end responsibility for our services. Talking of Rabobank: we are a Dutch bank that operates internationally for millions of customers. Together with our customers, members and partners, we work to create a world in which everyone has access to enough healthy food.