Senior Specialist Kerberos Authentication

Project overview

We are looking for an experienced Senior Specialist for Kerberos Authentication to support a challenging project in the area of Enterprise Security. The position can be filled remotely and can start immediately.

Responsibilities

You will analyze and reproduce the authentication and delegation chain across modern application servers to systematically narrow down ticket, identity, and delegation problems. The goal is to develop a documented and maintainable solution that eliminates implicit NTLM transitions, considers SPN/UPN resolution, and enables reusable GSSAPI security contexts. You will implement and test necessary adjustments in C# and C++ in representative multi-domain constellations under various service accounts.

Finally, you will document the diagnostic path, operational requirements, and test results for handover to the internal development team.

Requirements

You have solid project experience with Kerberos in multi-domain environments, especially with Active Directory trusts, SPNs, service accounts, and cross-domain delegation. You have a deep understanding of authentication and impersonation via COM/DCOM in native and managed applications, as well as practical development experience with C# and C++. Experience with Kestrel and ASP.NET Core, especially in the integration and error analysis of Windows authentication with Negotiate and Kerberos, is required. Sound knowledge of GSSAPI, SSPI, the Windows logon process, LSA, and SPNEGO completes your profile.

We Offer:

Flexible remote work, immediate project start, and an option for extension.

Project details

• Start: sofort
• Remote: onsite
• Location: DE
• Languages: German