Overview Join Schneider Digital as an Infrastructure Security Engineer focusing on identity and attack-path management. You will safeguard enterprise identity infrastructure across on-prem and cloud, collaborating with cloud, infrastructure, and security teams to strengthen identity posture. You will analyze risks, misconfigurations, and privilege escalation paths to drive remediation. This role offers exposure to a integral digital transformation initiative within a leading energy technology company.

Compensaciones / Beneficiosflexible schedulehybrid work planWellwo wellness platformWellhub gym network accesslife insurancestock ownership program ResponsabilidadesOperate identity security and attack-path analysis platforms (BloodHound, PingCastle, etc.)Identify identity-related risks, misconfigurations, excessive privileges, and lateral movement vectors across AD, Entra ID, and hybrid environmentsContinuously discover and monitor identity exposures and high-risk objectsSupport incident, problem, and change processes related to identity and directory servicesAnalyze hybrid identity synchronization issues with Cloud and Infrastructure teamsContribute to identity security baselines,



remediation planning, and hardening initiatives Requisitos principales5+ years hands-on experience with Active Directory and Azure AD / Entra IDExperience with identity-focused risk assessments, privilege analysis, and misconfiguration detection using BloodHound, PingCastle, or equivalentFamiliarity with AD Connect, hybrid authentication flows, and troubleshooting synchronization issuesDeep understanding of AD internals, authentication flows, Kerberos, NTLM, delegation, privileged groups, service accounts, trustsKnowledge of Entra ID architecture, identity governance, Conditional Access, and hybrid integration patternsExperience supporting incidents involving identity compromise or privilege escalation, and providing root-cause analysesCollaborative mindsetStrong analytical and problem-solving abilitiesClear communication with cross-functional teamsActive Directory internals (Kerberos, NTLM, delegation, trusts)Azure AD / Entra ID architecture and hybrid identityBloodHound and PingCastle usage for attack-path analysis

📌 Expert, Infrastructure Security Engineer (Identity & Attack Path Management) - Schneider Electric (Barcelona)
🏢 Jobrapido
📍 Barcelona