Start: Subject to screening
Duration: 12 months with an option to extend
Rate: Max. €110, including MSP fee, depending on education and work experience
Self-employed: Yes
Location: The candidate works one day per week, on Mondays, at the Arnhem Parktoren office. 
Screening: The candidate must undergo screening before starting. This screening process takes at least 4–6 weeks.
Proficiency in Dutch is a plus, but not required 

Profile: IAM Security Engineer

ART: Identity & Access Management

Organization: Alliander

Team: Non-Human Identities

Position: Mid-Level IAM Security Engineer

Alliander works every day to provide a reliable, affordable, and sustainable energy supply to millions of people in the Netherlands. The energy transition is driving an increasingly digitalized landscape in which applications, cloud platforms, OT systems, APIs, IoT solutions, and, increasingly, AI solutions communicate and interact with one another.

As a result, the number of non-human identities (NHIs)—such as service accounts, workload identities, machine identities, certificates, secrets, API keys, and AI agent identities—is growing rapidly. Effectively managing and securing these digital identities is essential to strengthening Alliander’s cyber resilience and ensuring the security and continuity of its critical operations.

About the Position

Within Alliander's ART IAM, we are launching a new team that will focus entirely on Non-Human Identities (NHI). For this team, we are looking for an IAM Security Engineer specializing in NHI, who will build and maintain the technical capabilities needed to identify, analyze, and mitigate risks related to NHIs, including service accounts, workload identities, and machine identities.

The team’s first assignment is to reduce risk and technical debt related to service accounts, using insights from identity security platforms. After that, the scope will expand to include workload identities, machine identities, certificate management, and other machine identity capabilities. The role focuses on automation, reporting, integrations, and scalable remediation capabilities that enable the organization to continuously improve its security posture.

What will you do?

Analyze findings from NHI and identity security platforms.

Develop automation and tools to support risk identification, tracking, and remediation.

Build reports, dashboards, and integrations to provide actionable insights.

Support application and infrastructure teams with technical remediation activities.

Develop scalable processes and controls for service account governance.

Contribute to the evolution of the NHI capability toward machine identity and certificate management.

Drive continuous improvement through automation and process optimization.

What do you bring to the table?

Experience and knowledge (required)

At least 3 years of relevant experience in identity, security engineering, automation, or software development, with hands-on experience analyzing security findings and developing technical remediation capabilities.

PowerShell, Python, or similar automation skills.

A strong understanding of Active Directory and identity concepts.

Experience with APIs and system integrations.

Understanding service accounts and workload identities.

Experience analyzing security findings and translating them into remediation actions.

Strong troubleshooting and problem-solving skills.

Ability to work independently and take ownership of deliverables.

Experience working in an agile/SAFe environment, preferably within an ART.

Fluency in English is a must; Dutch is a plus.

Competencies

Analytical: You can interpret findings, identify patterns, and translate them into risk-based improvement actions.

Automation-minded: You look for repeatable and scalable solutions rather than manual, one-time fixes.

Pragmatic: You balance security improvements with what application and infrastructure teams can realistically implement.

Collaborative: You work effectively across security, infrastructure, and application domains.

Ownership-driven: You take responsibility for deliverables and provide clarity when the path forward is not yet fully defined.

Nice-to-haves

Certificate lifecycle management and PKI fundamentals.

Secrets management and machine identity concepts.

Cloud Workload Identity Experience.

Data analysis and reporting skills.

Experience working across security, infrastructure, and application domains is a plus.

What makes this role interesting?

Non-Human Identities is one of the fastest-growing areas of focus within security and IAM. Service accounts, workload identities, and machine identities are often deeply embedded in business-critical applications and infrastructure, while ownership, lifecycle management, and governance can lag behind. In this role, you will help Alliander build a practical and scalable capability to reduce NHI-related risk, starting with remediation based on findings from the Identity Security platform and expanding toward broader machine identity and certificate management.