Senior Cloud Identity Engineer (m/f/d)

About your tasks Design and scale Microsoft Entra ID Governance by implementing Access Reviews, defining governance processes together with business stakeholders and building script-based automation to roll out governance capabilities consistently across a decentralized Microsoft Entra environment. Engineer secure workload identity services by automating the lifecycle of Service Principals, certificates, secrets and federated credentials, integrating directly with Azure Key Vault and ensuring every solution follows Least Privilege principles from day one. Design and implement modern self-service capabilities for Service Principals, Entra Groups and delegated administration, enabling engineering teams to work independently without unnecessary ownership or excessive permissions. Review and optimize Azure RBAC, Entra RBAC, application permissions, Microsoft Graph permissions and OAuth consent models to continuously reduce excessive privileges, strengthen identity governance and improve Redcare’s cloud identity security posture. Build identity monitoring and detection capabilities to proactively identify expiring credentials, permission misuse and guardrail violations using Microsoft Sentinel, Azure Monitor, Log Analytics and Kusto Query Language (KQL). Support the automation of Joiner, Mover and Leaver processes with HRIS as single source of truth for identity About you You bring hands-on experience designing and automating cloud identity solutions with Microsoft Entra, Administ