Senior Security Engineer (IAM)

Quick Facts

• Role: Senior Security Engineer (IAM)

Description

Own and advance IAM strategy across Microsoft Entra ID and Active Directory, including conditional access, PIM/PAM, and identity lifecycle governance. Develop identity-centric detections and threat-hunting workflows using Entra ID logs, and collaborate with Infrastructure, Client Services, and Cloud Admin teams to implement controls across endpoint, email, network, and cloud environments. Act as a senior advisor and escalation point for complex SOC investigations, while supporting the security roadmap through mentoring and documentation.

Responsibilities

• Own IAM strategy across Entra ID and Active Directory
• Manage conditional access, PIM/PAM, and identity lifecycle governance
• Develop identity-centric detections and threat-hunting workflows aligned with the SOC
• Partner with Infrastructure, Client Services, and Cloud Admin teams to review and implement controls across endpoint, email, network, and cloud
• Advise internally on Splunk Cloud SIEM and Cribl Stream/Edge; partner with the MSSP on detection engineering and optimization
• Oversee vulnerability management and quality-assure penetration tests
• Serve as a senior escalation point for complex SOC investigations
• Mentor SOC analysts and junior engineers
• Contribute to the long-term security roadmap
• Keep leadership informed, and maintain clear architecture and process documentation

Requirements

• Bachelor’s degree in IT Security, Cyber Security, or comparable qualification (or equivalent practical experience)
• 5+ years in IT security engineering or operations, with significant hands-on IAM responsibility
• Deep expertise in Entra ID, Active Directory, MFA/passwordless, SSO protocols (SAML, OIDC, SCIM), and identity governance
• Strong foundation in zero-trust architecture and frameworks such as NIST, ISO 27001, or MITRE ATT&CK
• Working knowledge of Splunk Cloud SIEM, CyberArk, SailPoint IdentityIQ, and Cribl Stream/Edge
• Familiarity with AWS, Proofpoint, and Zscaler/Cisco/FortiGate
• Proficiency in PowerShell, Python, or Microsoft Graph API
• Very good English communication skills; German is desirable
• Certifications such as Microsoft SC-300, SC-100, AZ-500, CISSP, CIDPRO, AWS Security Specialty, GIAC (GCIH, GCIA, GCFA), or Splunk/Cribl are a plus

Benefits

• 32 days of annual leave plus two additional days off
• Flexible working hours and home-office policy (approximately 60% possible)
• Attractive employee conditions for car insurance
• Employer contributions to occupational and disability pensions
• Supplementary company health insurance
• Capital-forming benefits
• Optional job ticket, parking, and monthly travel allowance
• EGYM Wellpass
• Financial subsidy, free coffee/tea/water, and weekly fruit delivery
• Health management and pme family service