Directory Services Architect (m/w/d)

As worldwide experts in filtration, MANN+HUMMEL develops solutions for vehicles, industrial applications, clean air inside vehicles and the sustainable use of water. With team spirit and an open culture of communication, we are continuously working towards achieving our vision of ‘leadership in filtration'.

Role Summary

The Directory Services Architect supports the design, optimization, and operation of enterprise directory and identity platforms (Active Directory and Microsoft Entra ID) in hybrid environments. Working closely with cross-functional teams, this role contributes to establishing standards, improving security and reliability, and enabling seamless access for users, devices, and applications.

Your Challenge

• Design and continuously improve enterprise directory services architecture, including Active Directory, Microsoft Entra ID, and related identity platforms
• Define architecture standards, technical guidelines, best practices, and governance principles for directory and identity services
• Provide architectural guidance for privileged access, authentication technologies, identity integrations, certificates, and PKI-related topics
• Apply advanced troubleshooting skills to resolve complex directory, identity, authentication, access, and infrastructure-related issues
• Support risk assessments, incident response, operational improvements, and logging and monitoring requirements
• Enable Service Center Operations through documentation, guidance, standards, and knowledge transfer
• Collaborate with infrastructure, cloud, security, workplace, and application teams to deliver secure, reliable, and scalable directory services solutions
• Education: University degree in Computer Science, Business Informatics, or a comparable field
• Professional Experience: Several years of experience in implementing and managing Active Directory services in an enterprise environment
• Skills: Solid experience with Active Directory and Microsoft Entra ID
• Scripting and automation skills, particularly with PowerShell; general coding experience is desired
• Understanding of identity and access management concepts and best practices
• Experience with privileged access concepts and directory services operations
• Basic knowledge of authentication protocols and certificate management
• Language skills: Very good German and English language skills
• Personality: Strong communication skills and ability to work effectively in cross-functional teams
• Ability to translate complex environments into clear strategies, roadmaps, and measurable outcomes
• KPI-driven, service-oriented mindset with strong governance and risk awareness
• International travel readiness

Diversity and inclusion are part of our DNA. We filter exclusively for the best talent. We therefore welcome applications from all people regardless of age, gender, origin, ancestry, disability, or other legally protected grounds.

• You will work with a high degree of independence and decision-making freedom
• Performance-based pay and comprehensive benefits
• 35 hours per week with flexitime or trust-based working hours (depending on the position) plus 30 days of vacation
• Option for hybrid working (4 days in Ludwigsburg, 1 day mobile). (For children under 12 years of age, the following still applies: 3 days in Ludwigsburg, 2 days mobile)
• Everyone has talent: Our talent management process supports you in your professional development
• Company restaurant
• Places in a private daycare center in the vicinity (both for children under and over 3 years of age)
• A modern company pension plan to supplement your statutory pension insurance
• Additional private health insurance (e.g., supplementary dental insurance)
• A large number of discounts in our corporate benefits portal (e.g., on vacations, fashion, insurance, etc.)
• Mobility offers: subsidy for the Deutschlandticket, JobRad leasing, and e-charging stations in the free parking garage with company charging rates

If you have any questions about this job posting, please contact our recruiting team. You can reach us at [email protected]. Please include the job title and location of the position you are interested in in your email. Please also note that for data protection reasons, we cannot accept applications by email; please use our online form exclusively for this purpose.