Senior Cloud Identity Engineer (m/f/d)
Redcare Pharmacy19 days ago
Remote, Germany or Hamburg, GermanySenior
Responsibilities
- Design and scale Microsoft Entra ID Governance, including Access Reviews and governance processes.
- Automate the lifecycle of service principals, certificates, secrets, and federated credentials using Azure Key Vault and related Microsoft Cloud services.
- Build self-service capabilities for service principals, Entra Groups, and delegated administration.
- Review and optimize Azure RBAC, Entra RBAC, application permissions, Microsoft Graph permissions, and OAuth consent models.
- Build identity monitoring and detection for expiring credentials, permission misuse, and guardrail violations.
- Support automation of Joiner, Mover, and Leaver processes using HRIS as the identity source of truth.
- Design secure identity architectures based on Zero Trust and Least Privilege principles.
- Collaborate with engineering teams and business stakeholders to improve cloud identity governance, security, and automation.
Requirements
- Hands-on experience designing and automating cloud identity solutions with Microsoft Entra, Administrative Units, Microsoft Entra ID Governance, Microsoft Graph Permissions, Azure, Microsoft 365, and Power Platform.
- Experience engineering secure and scalable identity platforms in complex cloud environments.
- Knowledge of Zero Trust, Least Privilege, APIs, governance, and secure-by-design architecture.
- Experience with identity monitoring, permission misuse detection, and continuous improvement of cloud security controls.
- Ability to collaborate across teams, present technical concepts, and communicate with stakeholders.
- Experience with PowerShell, Bash, Microsoft Graph API, Azure Functions, or Logic Apps for automation.
- Experience with modern AI-assisted engineering tools such as GitHub Copilot, Claude Code, or Codex is a plus.
- Experience with Entra Agent ID, Identity Blueprints, Microsoft 365 Agents, or Copilot is a plus.
Benefits
- Remote position based in Germany with occasional on-site collaboration and anchor days in Berlin or Cologne.
- €500 home-office setup allowance for remote employees.
- Reimbursement of travel and hotel expenses for required office anchor days.
- Comprehensive onboarding and welcome program.
- Internal and external training and personal development support.
- Employee referral program with bonuses for successful recommendations.