Senior Security Engineer | IAM, RBAC, PKI & Microsoft Entra ID/Azure AD Specialist

Design, development and security of websites and webshops for businesses. Developed and maintained websites/webshops using WordPress, Elementor, Next.js, TypeScript and Tailwind CSS. Configured hosting, DNS, Cloudflare, MFA, DDoS protection and payment methods such as Mollie/Stripe, and prepared handover documentation.

Security engineering in a public-sector, regulated environment focused on IAM/RBAC, Microsoft Entra ID/Azure AD, privileged access, PKI, certificate management, trust services, key management, IAM platform operations and process improvement. Managed and improved IAM processes, authorisation structures, roles and access rights using RBAC and least-privilege principles. Worked with Microsoft Entra ID/Azure AD, Active Directory, AGPM, Enterprise Applications, App Registrations, ADFS and Conditional Access. Managed and supported security and trust services including PKI, TLS hardening, F5/load balancing, PAM, key management, HSMs and certificate-dependent processes using KeyTalk. Used PowerShell and Microsoft Graph for IAM administration, analysis, reporting and automation. Worked in ServiceTeam SED, a multidisciplinary DevOps/Agile infrastructure team using Scrum.

Enterprise IT role responsible for local infrastructure, audit/compliance, Microsoft technologies and service improvement. Managed on-premises and Azure environments and supported IAM, RBAC and authorisation for users and roles including AGDLP principles. Worked with core Microsoft technologies, Active Directory, Azure/Intune/Azure AD, Office 365, endpoint security, Zscaler and MDM. Supported audit, compliance and ISO 27001-related operational processes including access management, logging, CMDB and asset management, documentation, incident follow-up and controlled changes. Contributed to operations and improvements during the transition from on-premises services to Azure cloud environments.