Identity & Cloud Engineer (Microsoft Entra ID / Azure)

Quick Facts

• Role: Identity & Cloud Engineer (Microsoft Entra ID / Azure)

Description

You will design, implement, and automate a central identity layer using Microsoft Entra ID as the source of truth for users, roles, and access. The role spans an initial project phase to connect Entra ID with other systems and ongoing operations to evolve integrations, automate account lifecycle, and manage identity security controls in a hybrid Azure/on-prem environment.

Responsibilities

• Configure and develop Entra ID, including its integration with on-prem Active Directory

• Connect applications to SSO and implement provisioning/deprovisioning using SAML, OIDC, LDAP, REST API, and SCIM

• Handle cases where direct integration isn’t possible using open-source IdPs (e.g., Keycloak) or other federation approaches

• Automate identity processes with scripting and APIs (PowerShell, Python, Microsoft Graph API)

• Design and manage Azure environment components related to identity and planned infrastructure backups

• Collaborate with the Security team on MFA, Conditional Access, RBAC, and access audits

• Help the team with L2 tickets as needed

Requirements

• Practical experience with Microsoft Entra ID (Azure AD) and on-prem Active Directory, including their integration

• Practical experience with Microsoft Azure (subscriptions, resource groups, RBAC) and how it maps to Entra ID

• Experience integrating applications to centralized identity (SAML, OIDC, LDAP, REST API) including via open-source IdPs or federation

• Experience with provisioning and deprovisioning user accounts

• Scripting and API skills (PowerShell or Python; Microsoft Graph and similar admin APIs such as Keycloak Admin API or Google Admin SDK)

• Identity security mindset: MFA, Conditional Access, RBAC, and access/audit practices aligned with ISO 27001 and TISAX

• Experience delivering similar IT projects (system rollout or migrations)

• Ability to use AI tools as a routine part of work with critical judgment and respect for data security

• Google Workspace administration knowledge or willingness to learn quickly

• Willingness to support L2 tickets

Benefits

• Faster and safer onboarding/offboarding with less manual work

• Clear access evidence that supports security audits (ISO 27001, TISAX)