Senior Cloud Identity Engineer

SHOP APOTHEKE EUROPE

Senior Cloud Identity Engineer building automated Microsoft Entra and Azure identity governance for Redcare Pharmacy’s European e-pharmacy platform. Securing workloads through Zero Trust, Least Privilege and cloud monitoring.

Posted 9/9/2026full-timeRemote • Berlin • 🇳🇱 NetherlandsSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and automating cloud identity solutions, with a strong focus on Microsoft Entra ID Governance, Azure, and identity monitoring. Capable of implementing Zero Trust architectures and collaborating effectively across teams to enhance governance and security.

Highest-signal resume keywords

Microsoft Entra ID GovernanceAutomation with PowerShell and BashIdentity Monitoring and DetectionMicrosoft Sentinel and Azure MonitorZero Trust Architecture Design

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud Identity Solutions DesignAutomationAPIsGovernance PracticesPermission Misuse DetectionKusto Query Language (KQL)Microsoft Graph PermissionsService Principal ManagementAzure RBAC OptimizationDelegated Administration

Soft Skills

CollaborationTechnical PresentationStakeholder Engagement

Tools & Technologies

Microsoft EntraAzure Key VaultMicrosoft 365Power PlatformLog Analytics

Industry Keywords

Identity GovernanceCloud EnvironmentsSecure-by-Design PracticesEmerging Identity TechnologiesJoiner Mover Leaver Processes

Tech Stack

Tools & technologies

AzureCloudVault

About the role

Key responsibilities & impact

Design and scale Microsoft Entra ID Governance, including Access Reviews
Define governance processes with business stakeholders
Build script-based automation for governance capabilities across a decentralized Microsoft Entra environment
Automate the lifecycle of Service Principals, certificates, secrets and federated credentials
Integrate workload identity services with Azure Key Vault
Design and implement self-service capabilities for Service Principals, Entra Groups and delegated administration
Review and optimize Azure RBAC, Entra RBAC, application permissions, Microsoft Graph permissions and OAuth consent models
Build identity monitoring and detection capabilities for expiring credentials, permission misuse and guardrail violations
Use Microsoft Sentinel, Azure Monitor, Log Analytics and Kusto Query Language (KQL) for monitoring and detection
Support automation of Joiner, Mover and Leaver processes using HRIS as the identity source of truth
Collaborate with the Cloud & Security team and stakeholders to improve cloud identity design, governance, security and automation

Requirements

What you’ll need

Hands-on experience designing and automating cloud identity solutions
Experience with Microsoft Entra, Administrative Units, Microsoft Entra ID Governance, Microsoft Graph Permissions, Azure, Microsoft 365 and Power Platform
Experience working in complex cloud environments
Ability to design Zero Trust and Least Privilege architectures
Experience with automation, APIs, governance and secure-by-design practices
Knowledge of Permission Misuse Detection and identity governance
Interest in emerging identity technologies
Ability to present technical concepts to colleagues and stakeholders
Ability to collaborate across teams
Experience with Microsoft Sentinel, Azure Monitor, Log Analytics and Kusto Query Language (KQL)
Experience with PowerShell and Bash automation
Nice to have: experience with AI-assisted engineering tools, Entra Agent ID, Identity Blueprints and Microsoft 365 Agents/Copilot

Benefits

Comp & perks

Comprehensive onboarding program and welcome days
Remote working
€500.00 home office setup allowance
Reimbursed travel costs and hotel expenses for anchor days
Personal development through various internal and external trainings
Employee referral program with bonus for successful recommendations