Start: Afhankelijk van screening
Duur: 12 maanden met optie op verlenging
Tarief: Max € 110,-  incl msp fee, afhankelijk van opleiding en werkervaring
ZZP: Ja 
Standplaats: Kandidaat zit 1 dag per week, op maandagen, op kantoor Arnhem Parktoren. 
Screening: Kandidaat moet gescreend worden voordat deze mag starten. Deze screening duurt minimaal 4-6 weken.
Nederlandse taal is een pré, geen must 

Profile: IAM Security Engineer

ART: Identity & Access Management

Organisation: Alliander

Team: Non-Human Identities

Position: Medior IAM Security Engineer

Alliander works every day to provide a reliable, affordable, and sustainable energy supply for millions of people in the Netherlands. The energy transition is driving an increasingly digitalized landscape in which applications, cloud platforms, OT systems, APIs, IoT solutions, and, increasingly, AI solutions communicate and interact with one another.

As a result, the number of Non-Human Identities (NHIs) such as service accounts, workload identities, machine identities, certificates, secrets, API keys and AI agent identities is growing rapidly. Effectively managing and securing these digital identities is essential to strengthen Alliander’s cyber resilience and ensuring the security and continuity of its critical operations.

About the position

Within Alliander's ART IAM, we are starting a new team that will focus entirely on Non-Human Identities (NHI). For this team, we are looking for an IAM Security Engineer with a focus on NHI, who will build and maintain the technical capabilities required to identify, analyse and reduce risks related to NHIs, including service accounts, workload identities and machine identities.

The team's first assignment is to reduce risk and technical debt in the area of service accounts, using insights from Identity Security platforms. After that, the scope will broaden towards workload identities, machine identities, certificate management and other machine identity capabilities. The role focuses on automation, reporting, integrations and scalable remediation capabilities that enable the organisation to continuously improve its security posture.

What will you do?

Analyse findings from NHI and Identity security platforms.

Develop automation and tooling to support risk identification, tracking and remediation.

Build reports, dashboards and integrations to provide actionable insights.

Support application and infrastructure teams with technical remediation activities.

Develop scalable processes and controls for service account governance.

Contribute to the evolution of the NHI capability towards machine identity and certificate management.

Drive continuous improvement through automation and process optimisation.

What do you bring?

Experience and knowledge (must-haves)

Minimum 3 years relevant experience in identity, security engineering, automation or software development with hands-on experience analysing security findings and developing technical remediation capabilities.

PowerShell, Python or similar automation skills.

Strong understanding of Active Directory and identity concepts.

Experience with APIs and system integrations.

Understanding of service accounts and workload identities.

Experience analysing security findings and translating them into remediation actions.

Strong troubleshooting and problem-solving skills.

Ability to work independently and take ownership of deliverables.

Experience working in an agile/SAFe environment, preferably within an ART.

Fluency in English is a must, Dutch is a Pré

Competencies

Analytical: you can interpret findings, identify patterns and translate them into risk-based improvement actions.

Automation-minded: you look for repeatable and scalable solutions instead of manual, one-off fixes.

Pragmatic: you balance security improvements with what application and infrastructure teams can realistically implement.

Collaborative: you work effectively across security, infrastructure and application domains.

Ownership-driven: you take responsibility for deliverables and create clarity where the way forward is not yet fully defined.

Nice-to-haves

Certificate lifecycle management and PKI fundamentals.

Secrets management and machine identity concepts.

Cloud workload identity experience.

Data analysis and reporting skills.

Experience working across security, infrastructure and application domains is a plus.

What makes this role interesting?

Non-Human Identities is one of the fastest-growing areas of focus within security and IAM. Service accounts, workload identities and machine identities are often deeply embedded in business-critical applications and infrastructure, while ownership, lifecycle management and governance can lag behind. In this role, you help Alliander build a practical and scalable capability to reduce NHI-related risk, starting with remediation based on Identity Security platform findings and expanding towards broader machine identity and certificate management.