Senior Cloud Identity Engineer

This is a fully remote position, open to applicants in Netherlands.

📋 Description

• Design and enhance Microsoft Entra ID Governance, encompassing Access Reviews.

• Establish governance procedures in collaboration with business stakeholders.

• Develop automation scripts to enhance governance functionalities within a decentralized Microsoft Entra environment.

• Automate the management of Service Principals, certificates, secrets, and federated credentials throughout their lifecycle.

• Integrate workload identity services with Azure Key Vault.

• Create and implement self-service options for Service Principals, Entra Groups, and delegated administration.

• Assess and optimize Azure RBAC, Entra RBAC, application permissions, Microsoft Graph permissions, and OAuth consent frameworks.

• Develop identity monitoring and detection systems for expiring credentials, unauthorized permission usage, and compliance violations.

• Utilize Microsoft Sentinel, Azure Monitor, Log Analytics, and Kusto Query Language (KQL) for effective monitoring and detection.

• Assist in automating the Joiner, Mover, and Leaver processes using HRIS as the definitive source of identity.

• Work in partnership with the Cloud & Security team and stakeholders to enhance cloud identity design, governance, security, and automation.

⛳️ Requirements

• Practical experience in designing and automating cloud identity solutions.

• Familiarity with Microsoft Entra, Administrative Units, Microsoft Entra ID Governance, Microsoft Graph Permissions, Azure, Microsoft 365, and Power Platform.

• Experience operating within complex cloud environments.

• Capability to design Zero Trust and Least Privilege architectures.

• Proficiency in automation, APIs, governance, and secure-by-design methodologies.

• Understanding of Permission Misuse Detection and identity governance principles.

• Enthusiasm for emerging identity technologies.

• Skill in conveying technical concepts to colleagues and stakeholders.

• Ability to collaborate effectively across teams.

• Experience with Microsoft Sentinel, Azure Monitor, Log Analytics, and Kusto Query Language (KQL).

• Proficient in PowerShell and Bash automation.

• Preferred: experience with AI-assisted engineering tools, Entra Agent ID, Identity Blueprints, and Microsoft 365 Agents/Copilot.

🏝️ Benefits

• Comprehensive onboarding program and welcome days.

• Flexible remote working options.

• €500.00 allowance for home office setup.

• Reimbursement for travel expenses and hotel costs during anchor days.

• Opportunities for personal development through various internal and external training programs.

• Employee referral program with bonuses for successful recommendations.