Senior Cloud Identity Engineer (m/f/d)
Core
Design, scale, and automate secure cloud identity solutions (Microsoft Entra, Azure RBAC, governance) for decentralized engineering teams and AI-driven workloads.
Role type
Senior Cloud Identity Engineer (IC)
Builds
Automated identity governance processes, secure workload identity services, self-service capabilities, and identity monitoring/detection systems.
Domain
Cloud Security / Identity Engineering / Microsoft Azure
Deliverable
production ML models | product features | infrastructure
Required skills
Microsoft Entra ID (Entra ID), Azure RBAC, Microsoft Graph API, PowerShell, Bash, Azure Functions, Logic Apps, Kusto Query Language (KQL), Microsoft Sentinel, Azure Monitor, OAuth 2.0, OpenID Connect, Certificate Lifecycle Management, Conditional Access, Identity Protection, Least Privilege architecture, Zero Trust principles.
Preferred skills
AI-assisted engineering tools (GitHub Copilot, Claude Code), Entra Agent ID, Identity Blueprints, Microsoft 365 Agents.
Responsibilities
Design and scale Microsoft Entra ID Governance with Access Reviews and automation; Engineer secure workload identity services (Service Principals, certificates, federated credentials); Implement modern self-service capabilities for Service Principals and delegated administration; Optimize Azure/Entra RBAC and OAuth consent models; Build identity monitoring and detection capabilities using Microsoft Sentinel; Automate Joiner, Mover, and Leaver processes with HRIS.
Seniority
Senior, hands-on IC