Senior Cloud Identity Engineer

This is a fully remote position, open to applicants in Germany.

📋 Description

• Design and enhance Microsoft Entra ID Governance by executing Access Reviews, collaborating with business stakeholders to define governance processes, and creating script-based automation to consistently implement governance capabilities across a decentralized Microsoft Entra environment.

• Develop secure workload identity services by automating the lifecycle management of Service Principals, certificates, secrets, and federated credentials, integrating seamlessly with Azure Key Vault while ensuring all solutions adhere to Least Privilege principles from the outset.

• Create and deploy modern self-service functionalities for Service Principals, Entra Groups, and delegated administration, empowering engineering teams to operate autonomously without unnecessary ownership or excessive permissions.

• Assess and enhance Azure RBAC, Entra RBAC, application permissions, Microsoft Graph permissions, and OAuth consent models to continuously minimize excessive privileges, fortify identity governance, and enhance Redcare’s cloud identity security posture.

• Develop identity monitoring and detection capabilities to proactively identify expiring credentials, prevent permission misuse, and enforce guardrail violations utilizing Microsoft Sentinel, Azure Monitor, Log Analytics, and Kusto Query Language (KQL).

• Assist in automating Joiner, Mover, and Leaver processes with HRIS as the single source of truth for identity.

⛳️ Requirements

• Practical experience in designing and automating cloud identity solutions using Microsoft Entra, Administrative Units, Microsoft Entra ID Governance, Microsoft Graph Permissions, Azure, Microsoft 365, and Power Platform within intricate cloud environments.

• Passion for engineering secure, scalable identity platforms and crafting Zero Trust and Least Privilege architectures while balancing developer experience with enterprise security demands.

• Innately inclined towards automation, APIs, governance, and secure-by-design principles rather than manual administrative tasks.

• Challenge excessive permissions and advocate for modern identity governance, Permission Misuse Detection, and continuous enhancement to foster secure, scalable cloud environments.

• Eager to explore emerging identity technologies, enjoy experimenting with innovative ideas, sharing knowledge, and presenting technical concepts to colleagues and stakeholders.

• Collaborate across teams to continually enhance the design, governance, security, and automation of cloud identity.

🏝️ Benefits

• Welcome days: We aim for you to feel at home from day one, supported by our comprehensive onboarding program.

• Remote space: For remote employees, we provide €500.00 to help you set up your home office, creating an environment that suits your work style.

• Anchor days: As per your remote contract, there will be occasions to travel to the office for anchor days, and all travel or hotel expenses will be fully reimbursed.

• Personal development: We support and encourage your individual growth through various internal and external training opportunities.

• Employee referral program: You know who would be a great fit for our team; therefore, successful referrals are rewarded with a bonus.