Senior Cloud Identity Engineer

This is a fully remote position, open to applicants in Germany.

📋 Description

• Design and enhance Microsoft Entra ID Governance utilizing Access Reviews and governance processes.

• Develop script-based automation to implement governance capabilities within a decentralized Microsoft Entra environment.

• Create secure workload identity services.

• Automate the management of Service Principals, certificates, secrets, and federated credentials.

• Integrate workload identity solutions with Azure Key Vault.

• Design and implement self-service functionalities for Service Principals, Entra Groups, and delegated administration.

• Assess and optimize Azure RBAC, Entra RBAC, application permissions, Microsoft Graph permissions, and OAuth consent models.

• Establish identity monitoring and detection capabilities using Microsoft Sentinel, Azure Monitor, Log Analytics, and KQL.

• Identify expiring credentials, misuse of permissions, and violations of guardrails.

• Assist in the automation of Joiner, Mover, and Leaver processes using HRIS as the authoritative identity source.

• Collaborate with business stakeholders, engineering teams, peers, and cross-functional groups.

• Contribute to defining the identity strategy across Azure, Data, ERP, and AI platforms.

⛳️ Requirements

• Practical experience in designing and automating cloud identity solutions.

• Proficiency with Microsoft Entra.

• Familiarity with Administrative Units.

• Knowledge of Microsoft Entra ID Governance.

• Experience with Microsoft Graph Permissions.

• Background in Azure.

• Familiarity with Microsoft 365.

• Experience with Power Platform.

• Competence in managing complex cloud environments.

• Ability to design Zero Trust and Least Privilege architectures.

• Experience with automation, APIs, governance, and secure-by-design practices.

• Understanding of Permission Misuse Detection and identity governance.

• Capability to collaborate across teams and convey technical concepts effectively.

• Experience with Microsoft Cloud identity ecosystem technologies, including Microsoft Graph API, Azure RBAC, Entra RBAC, Azure Policy, Azure Key Vault, Managed Identities, Enterprise Applications, App Registrations, Service Principals, Certificate Lifecycle Management, Conditional Access, Identity Protection, Workload Identity Federation, Microsoft Sentinel, Azure Monitor, Log Analytics, Kusto Query Language (KQL), Microsoft 365, and Active Directory.

• Proficiency in PowerShell and Bash automation.

• Familiarity with Azure Functions or Logic Apps.

• Experience with OAuth 2.0 and OpenID Connect.

• Experience with Microsoft Entra Agent ID, Identity Blueprints, Microsoft 365 Agents/Copilot, or AI coding assistants is a plus.

🏝️ Benefits

• Comprehensive onboarding program.

• Remote working arrangement.

• €500 home office setup allowance.

• Reimbursement of travel costs and hotel expenses for anchor days.

• Personal development through in-house and external training.

• Employee referral bonus.