Security & IAM Engineer

About Frank Energie Frank Energie is a rapidly growing company located in the Amsterdam Zuidas district. We are revolutionizing the energy market, accelerating the energy transition, and making affordable sustainable energy accessible to everyone. We are young and ambitious, and we want to move fast. Working towards a greener world. We are already a major player in the Netherlands and are on the verge of conquering the rest of Europe. We expanded to Belgium, Spain and France. This year, we are heading to Denmark. Will you join us on this journey? Your job will be challenging, but for an ambitious person like you, definitely achievable. Your learning curve will be steep, and the growth opportunities are limitless. In addition to hard work, we also believe in relaxation and team-building activities – work hard, play hard. Who we need We are looking for a Security & IAM Engineer who will own identity, access and security controls across our entire technology landscape — from Microsoft 365, Entra ID and Intune, to Google Cloud and BigQuery, to the infrastructure estate behind our platform, managed databases, automation tooling). You make sure the right people have the right access to the right systems, that our devices and infrastructure are compliant, and that we can prove it — to regulators, to auditors, and to ourselves. This is a controls and operations role: you operate, review, document and report on security controls, rather than owning production infrastructure changes or application architecture. You will build the automation and inventories that make these controls scale, and you’ll be the person who keeps NIS2 compliance grounded in evidence rather than paperwork. We are looking for someone who is comfortable owning a broad domain independently, who prioritises pragmatically, and who is a real team player. What you’ll be doing Your work spans three connected domains: Microsoft identity & device management, Google Cloud IAM, and security & platform operations across our infrastructure. In practice, that includes: - Managing Conditional Access, Entra ID, Intune device compliance, SSO/MFA policies, and the joiner-mover-leaver lifecycle for Microsoft 365; - Administering IAM roles and permissions in Google Cloud and BigQuery, including service account lifecycle and access reviews for customer and PII data across our five markets; - Owning network access control, firewall and VPC configuration as code, and cloud/SaaS platform RBAC; - Maintaining the certificate and device identity lifecycle, including mTLS certificates for market integrations; - Running vulnerability and patch management across endpoints, infrastructure and the application stack; - Maintaining our infrastructure automation platform (Semaphore, Ansible, Terraform) and the security primitives it manages; - Maintaining backup, restoring after incidents, disaster recovery evidence, and coordinating recovery exercises; - Centralising audit logging and owning security and compliance monitoring, with first-line triage and routing of platform alerts; - Delivering the evidence and figures behind our NIS2 security control reporting; Your background and skills You have solid experience across identity, security and infrastructure operations. You know how to adapt and react quickly to new situations, have the courage to make decisions, and are energetic, independent, and driven to perform — essential in an environment that changes faster than most. - You are eager and fully committed, working independently, proactively, and structured, and take ownership of your projects; - You have ~ 5 years of relevant experience and want to grow further with Frank Energie; - You have hands-on experience with MS Entra ID, Intune and Conditional Access (must); - You have experience with IAM on a major cloud platform, ideally Google Cloud / BigQuery (is a plus); - You are comfortable with infrastructure-as-code and automation (Terraform, Ansible, or equivalent); - You understand NIS2, ISMS frameworks and what qualifies as audit evidence, not just policy; - You have a keen eye for detail and a passion for clean, well-documented processes; - You can give and receive feedback well (we value honesty); - You are fluent in Dutch and English. What is your working environment? As a Security & IAM Engineer, you work in a rapidly changing energy landscape, shaping the security foundation of the energy transition together with your team. A broad, high-ownership job, with challenging but achievable goals. Besides the IT team, you will also work closely with our Operations, Smart and Risk teams. What we offer - Competitive salary package; - Opportunity to earn a performance-related bonus; - Employee discount on your energy contract; - Laptop and accessories; - A shared office at Amsterdam's Zuidas with our sister companies; - A challenging role in a dynamic and collaborative environment; - Support for personal development and growth; - Travel reimbursement; - Team-building activities; - Great coffee, drinks, fruit, and snacks at the office; - A chance to shape the security backbone of a company expanding across five European markets, while developing your talent and network.