Senior Cloud Identity & Access Management Specialist

Quick Facts

• Senior Cloud Identity & Access Management role focused on hybrid identity security

Description

Design, develop, and operate a secure hybrid identity infrastructure based on Microsoft Entra ID and Active Directory. You will manage enterprise application access, including SSO configuration (SAML/OIDC) and monitoring of app permissions. Implement cloud security with Conditional Access, MFA (FIDO2), and Privileged Identity Management (PIM), while owning Microsoft PKI operations (ADCS) and identity protection integrations.

Responsibilities

• Design, further develop, and operate secure hybrid identity infrastructure based on Microsoft Entra ID and Active Directory
• Central administration and protection of enterprise applications, including SSO (SAML/OIDC) configuration and app permission monitoring
• Implement and harden access controls using Conditional Access, MFA (FIDO2), and PIM
• Own the certificate lifecycle and operate and secure Microsoft PKI infrastructure (ADCS)
• Proactively secure identities and workloads and integrate with security solutions for threat detection

Requirements

• Completed degree in Computer Science, Business Informatics, or comparable IT training
• Long-standing expertise in Cloud Identity (Entra ID) and classic Active Directory management
• In-depth protocol knowledge: OAuth 2.0, OpenID Connect, SAML 2.0, Kerberos/LDAP
• Security mindset and experience securing hybrid environments (e.g., tiering models, lateral movement protection)
• Experience configuring synchronization tools such as Entra Connect or Cloud Sync
• PKI expertise: certificate services administration, CRL handling, enrollment processes like SCEP or NDES
• Ability to document complex IAM architectures and mentor junior colleagues
• Very good German and English skills (written and spoken)
• Interest in shaping an IT transformation

Benefits

• Employee performance-based participation
• Attractive compensation
• Flexible working hours and mobile work
• Individual internal and external development opportunities