Senior Cloud Identity Engineer

Job not on LinkedIn

🔥 11 minutes ago

🇩🇪 Germany – Remote

⏰ Full Time

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 24%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SHOP APOTHEKE EUROPE

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🏥 Healthcare

⚕️ Healthcare Insurance

🛒 Retail

Healthcare • Healthcare Insurance • Retail

SHOP APOTHEKE EUROPE is a pharmacy company focused on providing healthcare and pharmaceutical services within Europe. Operating under the brand name Redcare, it emphasizes a people-first approach to pharmacy, aiming to guide individuals through their health journeys. The company is committed to sustainability, aligning its strategies with the Paris Climate Agreement to contribute positively to environmental health. SHOP APOTHEKE EUROPE also engages in public affairs, investor relations, and offers career opportunities for those interested in joining their mission-driven team.

📋 Description

• Design and scale Microsoft Entra ID Governance using Access Reviews and governance processes • Collaborate with business stakeholders to define governance processes • Build script-based automation for consistent governance across a decentralized Microsoft Entra environment • Automate the lifecycle of Service Principals, certificates, secrets and federated credentials • Integrate workload identity services with Azure Key Vault • Design and implement self-service capabilities for Service Principals, Entra Groups and delegated administration • Review and optimize Azure RBAC, Entra RBAC, application permissions, Microsoft Graph permissions and OAuth consent models • Build identity monitoring and detection capabilities for expiring credentials, permission misuse and guardrail violations • Use Microsoft Sentinel, Azure Monitor, Log Analytics and Kusto Query Language (KQL) for identity monitoring • Support automation of Joiner, Mover and Leaver processes using HRIS as the identity source of truth

🎯 Requirements

• Hands-on experience designing and automating cloud identity solutions • Experience with Microsoft Entra, Administrative Units, Microsoft Entra ID Governance, Microsoft Graph Permissions, Azure, Microsoft 365 and Power Platform • Experience working in complex cloud environments • Ability to design Zero Trust and Least Privilege architectures • Knowledge of automation, APIs, governance and secure-by-design practices • Knowledge of Permission Misuse Detection and identity governance • Curiosity about emerging identity technologies • Ability to experiment with new ideas, share knowledge and present technical concepts • Ability to collaborate across teams • Experience with Microsoft Sentinel, Azure Monitor, Log Analytics and Kusto Query Language (KQL) • Experience with PowerShell and Bash • Experience with Azure Functions or Logic Apps • Experience with Microsoft Graph API • Experience with Azure RBAC, Entra RBAC, Azure Policy, Azure Key Vault, Managed Identities, Enterprise Applications, App Registrations, Service Principals, Conditional Access, Identity Protection, Workload Identity Federation, OAuth 2.0 and OpenID Connect • Experience with AI-assisted engineering tools, Entra Agent ID, Identity Blueprints or Microsoft 365 Agents/Copilot is a plus, not required

🏖️ Benefits

• Comprehensive onboarding program • Remote working • €500.00 home office setup allowance • Reimbursement of travel costs and hotel expenses for anchor days • Various internal and external training opportunities • Employee referral bonus