Senior Cloud Identity Engineer (Microsoft Entra)

Location: Remote position based in Germany, with occasional on-site collaboration and anchor days in Berlin or Cologne.

Company

Europe’s No. 1 e-pharmacy, focused on improving access to healthcare through technology and innovation.

What you will do

• Design and scale Microsoft Entra ID Governance, including Access Reviews, governance processes, and script-based automation.
• Engineer secure workload identity services by automating the lifecycle of service principals, certificates, secrets, and federated credentials with Azure Key Vault.
• Build self-service capabilities for service principals, Entra Groups, and delegated administration while maintaining secure access boundaries.
• Review and optimize Azure RBAC, Entra RBAC, application permissions, Microsoft Graph permissions, and OAuth consent models.
• Build identity monitoring and detection capabilities with Microsoft Sentinel, Azure Monitor, Log Analytics, and Kusto Query Language.
• Support automated Joiner, Mover, and Leaver processes using HRIS as the identity source of truth.

Requirements

• Hands-on experience designing and automating cloud identity solutions with Microsoft Entra, Administrative Units, Entra ID Governance, Microsoft Graph Permissions, Azure, Microsoft 365, and Power Platform.
• Experience engineering secure, scalable identity platforms and designing Zero Trust and Least Privilege architectures.
• Strong focus on automation, APIs, governance, and secure-by-design engineering rather than manual administration.
• Ability to identify excessive permissions and improve identity governance, permission misuse detection, and cloud security.
• Experience collaborating across teams, sharing knowledge, and presenting technical concepts to stakeholders.

Nice to have

• Experience with AI-assisted engineering tools such as GitHub Copilot, Claude Code, Codex, or similar tools.
• Experience with Entra Agent ID, Identity Blueprints, Microsoft 365 Agents, or Copilot.

Culture & Benefits

• Comprehensive onboarding through a structured welcome-day program.
• Remote work contract based in Germany with occasional office attendance in Berlin or Cologne depending on business and team requirements.
• €500 allowance for setting up a home office.
• Anchor-day travel, including transportation and hotel expenses, is fully reimbursed.
• Support for individual development through internal and external training.
• Employee referral bonus program.