Senior Cloud Identity Engineer

This is a fully remote position, open to applicants in Germany.

📋 Description

• Design and enhance Microsoft Entra ID Governance, which includes Access Reviews and governance workflows.

• Create automation scripts to implement governance features across a distributed Microsoft Entra setting.

• Develop secure workload identity services and automate the management of service principals, certificates, secrets, and federated credentials.

• Integrate workload identity solutions with Azure Key Vault.

• Design and deploy self-service options for service principals, Entra Groups, and delegated administration.

• Analyze and refine Azure RBAC, Entra RBAC, application permissions, Microsoft Graph permissions, and OAuth consent frameworks.

• Establish identity monitoring and detection features utilizing Microsoft Sentinel, Azure Monitor, Log Analytics, and Kusto Query Language.

• Actively identify expiring credentials, misuse of permissions, and violations of guardrails.

• Assist in automating Joiner, Mover, and Leaver processes using HRIS as the authoritative identity source.

• Collaborate with business stakeholders, engineering teams, colleagues, and cross-functional groups to enhance cloud identity design, governance, security, and automation.

⛳️ Requirements

• Practical experience in designing and automating cloud identity solutions.

• Familiarity with Microsoft Entra, Administrative Units, Microsoft Entra ID Governance, Microsoft Graph Permissions, Azure, Microsoft 365, and Power Platform.

• Experience in complex cloud environments.

• Capability to design Zero Trust and Least Privilege architectures.

• Ability to balance the developer experience with enterprise security needs.

• Mindset focused on automation, API, governance, and secure-by-design principles.

• Understanding of Permission Misuse Detection and ongoing identity governance enhancement.

• Skill in collaborating across teams and articulating technical concepts to colleagues and stakeholders.

• Curiosity about emerging identity technologies and a willingness to explore new ideas.

• Experience with Microsoft Entra Agent ID, Identity Blueprints, Microsoft 365 Agents/Copilot, or AI coding assistants is an advantage, though not mandatory.

🏝️ Benefits

• Comprehensive onboarding program and welcome days.

• Flexible remote working arrangement.

• €500.00 home-office setup allowance.

• Reimbursement for travel costs and hotel expenses for anchor days.

• Personal development support through various internal and external training opportunities.

• Employee referral program with bonus rewards.