Cloud Identity Engineer (Microsoft Entra ID)

Quick Facts

• Role: Cloud Identity Engineer (Microsoft Entra ID)

• Focus: Identity & Access Management in cloud and hybrid environments

Description

You will operate and continuously improve Microsoft Entra ID in a multi-tenant enterprise setting using Azure and Microsoft 365. The role includes tenant-spanning identity scenarios (cross-tenant synchronization, B2B collaboration, and multi-tenant organization), implementing strong access controls (Conditional Access, MFA/passwordless, Entra ID Protection), and building Identity Governance (PIM, Access Reviews, Entitlement Management, lifecycle processes). You will also automate identity workflows and act as the central point of contact for regulatory requirements and audits.

Responsibilities

• Run and enhance Microsoft Entra ID in a multi-tenant environment with Azure and Microsoft 365

• Design tenant-spanning scenarios for international offices, including cross-tenant synchronization, B2B collaboration, and multi-tenant organization

• Manage Conditional Access, authentication methods (MFA, passwordless), and Entra ID Protection

• Build and improve Identity Governance: Privileged Identity Management, Access Reviews, Entitlement Management, and lifecycle processes

• Manage workload identities and the authorization model for Entra and Azure roles (app registrations, service principals, managed identities)

• Support hybrid identity integration with Active Directory via Entra Connect and Cloud Sync

• Automate using Microsoft Graph, PowerShell, and Infrastructure as Code

• Implement regulatory requirements (including DORA and MaRisk) and serve as the main point of contact for audits, reviewers, and information security

Requirements

• Completed degree in (Business) Informatics or equivalent qualification, plus several years of Identity & Access Management experience

• Strong practical experience with Microsoft Entra ID in complex enterprise environments (ideally multiple tenants and international locations)

• Very good knowledge of Conditional Access, PIM, and Identity Governance, and of OAuth 2.0, OpenID Connect, and SAML

• Sound understanding of Azure RBAC, Microsoft 365, and hybrid identities with Active Directory

• Experience automating identity processes with Microsoft Graph and PowerShell; Terraform or Bicep knowledge is a plus

• Experience in regulated environments (preferably finance) and safe handling of audit/revision requirements

• Independent, structured approach and ability to communicate complex topics to management appropriately

• German at least C1 and very good English (written and spoken)

Benefits

• Modern talent management and career development

• Flexible working hours and options for partial mobility or home office

• Sabbaticals

• Company pension plan, comprehensive health management, and leasing options (Job-Rad, tablet, smartphone)

• Lunch offerings and multiple daycare centers