Senior Cloud Identity Engineer

This is a fully remote position, open to applicants in Netherlands.

📋 Description

• Design and expand Microsoft Entra ID Governance utilizing Access Reviews and governance processes.

• Work in collaboration with business stakeholders to establish governance procedures.

• Create script-based automation to ensure consistent governance throughout a decentralized Microsoft Entra environment.

• Develop secure workload identity services.

• Automate the management of service principals, certificates, secrets, and federated credentials.

• Integrate workload identity solutions with Azure Key Vault.

• Design and deploy self-service functionalities for service principals, Entra Groups, and delegated administration.

• Review and enhance Azure RBAC, Entra RBAC, application permissions, Microsoft Graph permissions, and OAuth consent models.

• Create identity monitoring and detection capabilities for expiring credentials, permission misuse, and guardrail violations.

• Leverage Microsoft Sentinel, Azure Monitor, Log Analytics, and KQL for monitoring and detection purposes.

• Assist in the automation of Joiner, Mover, and Leaver processes using HRIS as the identity source of truth.

• Collaborate with teams to enhance cloud identity design, governance, security, and automation.

⛳️ Requirements

• Proven hands-on experience in designing and automating cloud identity solutions.

• Familiarity with Microsoft Entra, Administrative Units, Microsoft Entra ID Governance, Microsoft Graph Permissions, Azure, Microsoft 365, and Power Platform.

• Experience in navigating complex cloud environments.

• Capability to design Zero Trust and Least Privilege architectures.

• Proficient in automation, APIs, governance, and secure-by-design methodologies.

• Understanding of Permission Misuse Detection and identity monitoring practices.

• Experience in balancing developer experience with enterprise security needs.

• Interest in emerging identity technologies and willingness to experiment with new concepts.

• Ability to communicate technical ideas effectively to colleagues and stakeholders.

• Proven experience in cross-team collaboration.

• Familiarity with Microsoft Sentinel, Azure Monitor, Log Analytics, Kusto Query Language (KQL), PowerShell, Bash, Azure Functions, or Logic Apps, as relevant to the role.

• Experience with Microsoft Entra Agent ID, Identity Blueprints, Microsoft 365 Agents/Copilot, or AI coding assistants is a plus but not mandatory.

🏝️ Benefits

• Comprehensive onboarding program and welcome days.

• Flexible remote working options.

• €500 allowance for home office setup.

• Anchor days with fully reimbursed travel and accommodation costs.

• A variety of internal and external training opportunities.

• Employee referral program with bonus incentives.

• Site-specific benefits that support health, family time, and skills development.