Senior Cloud Identity Engineer (m/f/d)
Core
Design, scale, and automate secure cloud identity solutions (Microsoft Entra, Azure RBAC, Service Principals) for a decentralized Microsoft Cloud environment, enforcing Zero Trust and Least Privilege principles.
Role type
Senior Cloud Identity Engineer (IC)
Builds
Automated identity governance processes, secure workload identity services, self-service capabilities for engineering teams, and identity monitoring/detection capabilities.
Domain
Cloud Security / Identity Engineering / Microsoft Azure
Deliverable
production ML models | product features | infrastructure
Required skills
Microsoft Entra ID (Entra ID Governance, Administrative Units, Conditional Access), Azure RBAC, Microsoft Graph API, PowerShell, Bash, Azure Functions/Logic Apps, Azure Key Vault, Microsoft Sentinel, KQL, OAuth 2.0, OpenID Connect, Service Principal lifecycle management, Certificate Lifecycle Management, Identity Protection, Workload Identity Federation.
Preferred skills
AI-assisted engineering tools (GitHub Copilot, Claude Code), Entra Agent ID, Identity Blueprints, Microsoft 365 Agents/Copilot.
Responsibilities
Design and scale Microsoft Entra ID Governance with Access Reviews and script-based automation; Engineer secure workload identity services automating Service Principal and certificate lifecycles; Design modern self-service capabilities for Service Principals and delegated administration; Review and optimize Azure/Entra RBAC and OAuth consent models to reduce excessive privileges; Build identity monitoring capabilities using Microsoft Sentinel and KQL to detect permission misuse; Support automation of Joiner/Mover/Leaver processes with HRIS.
Seniority
Senior, hands-on IC