Senior Cloud Identity Engineer (m/f/d)
Core
Design, scale, and automate Microsoft Entra ID governance and secure workload identity services for a decentralized cloud environment.
Role type
Senior Cloud Identity Engineer (IC)
Builds
Automated identity governance processes, secure workload identity lifecycles, self-service capabilities, and identity monitoring solutions.
Domain
Cloud Security / Identity Management (Microsoft Azure/Microsoft 365)
Deliverable
production ML models | product features | infrastructure
Required skills
Microsoft Entra ID, Azure RBAC, Microsoft Graph API, PowerShell, Bash, Azure Functions, Logic Apps, KQL, OAuth 2.0, OpenID Connect, Conditional Access, Identity Protection, Service Principals, Certificate Lifecycle Management
Preferred skills
AI-assisted engineering tools (GitHub Copilot, Claude Code), Entra Agent ID, Identity Blueprints, Microsoft 365 Agents
Technologies
Microsoft Entra, Microsoft Graph API, Azure Key Vault, Microsoft Sentinel, Azure Monitor, Log Analytics, Kusto Query Language (KQL), Azure Policy, Active Directory
Responsibilities
Design and scale Microsoft Entra ID Governance with Access Reviews and script-based automation; Engineer secure workload identity services automating Service Principals and certificates; Design modern self-service capabilities for engineering teams; Review and optimize Azure/Entra RBAC and OAuth consent models; Build identity monitoring and detection capabilities using Microsoft Sentinel; Support automation of Joiner, Mover, and Leaver processes with HRIS.
Seniority
Senior, hands-on IC