Senior Cloud Identity Engineer

This is a fully remote position, open to applicants in Germany.

📋 Description

• Create and expand Microsoft Entra ID Governance, focusing on Access Reviews and governance workflows.

• Develop script-driven automation to deploy governance functionalities across a distributed Microsoft Entra ecosystem.

• Streamline the lifecycle management of Service Principals, certificates, secrets, and federated credentials.

• Connect workload identity services with Azure Key Vault while adhering to Least Privilege principles.

• Design and execute self-service functionalities for Service Principals, Entra Groups, and delegated administration.

• Evaluate and enhance Azure RBAC, Entra RBAC, application permissions, Microsoft Graph permissions, and OAuth consent frameworks.

• Create identity monitoring and detection systems utilizing Microsoft Sentinel, Azure Monitor, Log Analytics, and KQL.

• Assist in automating Joiner, Mover, and Leaver processes using HRIS as the definitive identity source.

• Partner with business stakeholders, engineering teams, and cross-functional colleagues to develop cloud identity strategies and governance.

⛳️ Requirements

• Practical experience in designing and automating cloud identity solutions.

• Familiarity with Microsoft Entra, Administrative Units, Microsoft Entra ID Governance, Microsoft Graph Permissions, Azure, Microsoft 365, and Power Platform.

• Experience in navigating complex cloud environments.

• Capability to design Zero Trust and Least Privilege architectures.

• Proficient in automation, APIs, governance, and secure-by-design methodologies.

• Understanding of Permission Misuse Detection and identity governance.

• Keen interest in emerging identity technologies and AI-assisted engineering tools.

• Ability to work collaboratively across teams and articulate technical concepts to peers and stakeholders.

• Experience with Microsoft technologies such as Entra Agent ID, Identity Blueprints, and Microsoft 365 Agents / Copilot is advantageous.

• Proficiency in Microsoft Graph API, Azure Functions or Logic Apps, PowerShell, and Bash.

• Knowledge of Azure RBAC, Entra RBAC, Azure Policy, Azure Key Vault, Managed Identities, Enterprise Applications, App Registrations, Service Principals, Certificate Lifecycle Management, Conditional Access, Identity Protection, Workload Identity Federation, Microsoft Sentinel, Azure Monitor, Log Analytics, Kusto Query Language (KQL), Microsoft 365, Active Directory, OAuth 2.0, and OpenID Connect.

🏝️ Benefits

• Comprehensive onboarding program / welcome days.

• €500 office space setup allowance for home office.

• Reimbursement of travel costs and hotel expenses for anchor days.

• In-house and external training along with personalized development support.

• Employee referral bonus.