Directory Services Engineer (DirX, LDAP, X.500) for NATO...

When the directory is wrong, everything downstream is wrong.

A multinational defence organisation runs its enterprise directory and identity provisioning on the DirX product family. You would operate it, extend it, and be the second and third line when something stops synchronising - on site in Braine-l'Alleud, with a share of the on-call rota.

What you would be doing

• Monitoring, operating and administering the directory and identity products, and the synchronisation between them
• Building and maintaining the operating procedures the service runs on, following the customer's guidance
• Taking second and third-line requests through the ticketing system, diagnosing and fixing what users report
• Connecting new data sources and consumers - configuration, customisation and new connectors with standard product technologies
• Managing provisioning, backups and recovery, licence compliance and the security rules around the service
• Delivering small increments and enhancements to the application as the service owner asks for them, through incident, change and release management
• Coaching first-line colleagues and writing the documentation they need
• Taking your turn on a shared on-call rota, and reporting what happened the following morning

What you would bring

• Demonstrable expertise in X.500 and LDAP directories and in directory synchronisation products, ideally the DirX family, with the product certification behind it
• Identity management experience, and scripting in TCL for automation inside the product
• Active Directory for accounts, permissions and access control; SQL for the databases behind it all
• Development in Java or .NET for customisations, PowerShell for automation, and Red Hat Linux administration
• Working knowledge of public key infrastructure and certificate management
• Excellent English, the self-motivation to work alone, and the instinct for a problem

Why this one is worth a look

It is deep, specialised product work with a clear owner, in a sprint-based team that shares its on-call fairly, and it runs from a standing framework rather than a one-off project.