{"id":1042887,"url":"https://alion.io/job/redcare-pharmacy-senior-cloud-identity-engineer-mfd-8","title":"Senior Cloud Identity Engineer (m/f/d)","company":{"id":3862,"name":"Redcare Pharmacy","domain":"redcare-pharmacy.com","url":"https://alion.io/company/redcare-pharmacy","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":80,"open_postings":27,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":21,"computed_at":"2026-10-22T06:10:10Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cologne, Germany"],"countries":["DE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":62000,"max_usd":112000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":37},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PowerShell","optional":false},{"name":"Zero Trust","optional":false},{"name":"Claude Code","optional":true},{"name":"Copilot","optional":true},{"name":"OpenAI Codex","optional":true}],"status":"live","first_seen_at":"2026-09-09T16:20:53Z","employer_posted_date":"2026-09-09","last_verified_at":"2026-10-22T07:29:28Z","board_verified":true,"closed_at":null,"days_open":42,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":42},"description":"About Redcare Pharmacy\nAs Europe’s No. 1 e-pharmacy, Redcare Pharmacy is powered by passionate teams and cutting-edge innovation. We strive to create a healthy, collaborative work environment where every employee feels valued and inspired to contribute to our vision: “Until every human has their health.” If you’re seeking a career that offers purpose and aligns with your values, join us and start your #Redcareer today.\nAbout the role\nWe are looking for a Senior Cloud Identity Engineer to help shape the future of identity engineering in our Microsoft Cloud environment. You will build secure, scalable and highly automated identity solutions that empower decentralized teams to innovate independently while operating within clear governance, Zero Trust principles and Least Privilege guardrails.\nAs part of our Cloud & Security team, you will help define the future of identity across Azure, Data, ERP and AI platforms, driving modern approaches for human, workload and AI-driven identities. From Identity Blueprints and agent identities to enterprise-wide governance, you will have the opportunity to influence strategic cloud security initiatives and establish identity as the foundation of a secure, scalable and AI-ready cloud platform.\nAbout the tech stack\nCore technologies\nYou will work with a modern Microsoft Cloud identity ecosystem, leveraging technologies such as Microsoft Entra, Microsoft Graph API, Microsoft Entra ID Governance (including Access Reviews), Azure, Azure RBAC, Entra RBAC, Azure Policy, Azure Key Vault, Managed Identities, Enterprise Applications, App Registrations, Service Principals, Certificate Lifecycle Management, Administrative Units, Conditional Access, Identity Protection, Workload Identity Federation, Microsoft Sentinel, Azure Monitor, Log Analytics, Kusto Query Language (KQL), Microsoft 365, Active Directory (Core Services), OAuth 2.0 and OpenID Connect.\nYou will help design secure identity architectures with a strong focus on Least Privilege, Azure Policy, Guardrails and Governance, as well as Permission Misuse Detection & Identity Monitoring.\nAutomation is a key part of this role, using PowerShell and Bash, alongside Microsoft Graph API, Azure Functions or Logic Apps, to build secure, scalable identity solutions and governance processes that follow Zero Trust and the Least Privilege principle across Azure and Microsoft Entra services.\nNice to have\nAs we continue to evolve our cloud identity platform for AI-driven and autonomous workloads, experience with modern AI-assisted engineering tools (e.g. GitHub Copilot, Claude Code, Codex or similar AI coding assistants) as well as Microsoft technologies such as Entra Agent ID, Identity Blueprints and Microsoft 365 Agents / Copilot is considered a plus.\n About your tasks\nDesign and scale Microsoft Entra ID Governance by implementing Access Reviews, defining governance processes together with business stakeholders and building script-based automation to roll out governance capabilities consistently across a decentralized Microsoft Entra environment.\nEngineer secure workload identity services by automating the lifecycle of Service Principals, certificates, secrets and federated credentials, integrating directly with Azure Key Vault and ensuring every solution follows Least Privilege principles from day one.\nDesign and implement modern self-service capabilities for Service Principals, Entra Groups and delegated administration, enabling engineering teams to work independently without unnecessary ownership or excessive permissions.\nReview and optimize Azure RBAC, Entra RBAC, application permissions, Microsoft Graph permissions and OAuth consent models to continuously reduce excessive privileges, strengthen identity governance and improve Redcare’s cloud identity security posture.\nBuild identity monitoring and detection capabilities to proactively identify expiring credentials, permission misuse and guardrail violations using Microsoft Sentinel, Azure Monitor, Log Analytics and Kusto Query Language (KQL).\nSupport the automation of Joiner, Mover and Leaver processes with HRIS as single source of truth for identity\n About you\nYou bring hands-on experience designing and automating cloud identity solutions with Microsoft Entra, Administrative Units, Microsoft Entra ID Governance, Microsoft Graph Permissions, Azure, Microsoft 365 and Power Platform in complex cloud environments.\nYou enjoy engineering secure, scalable identity platforms and designing Zero Trust and Least Privilege architectures while balancing developer experience with enterprise security requirements. You naturally think in automation, APIs, governance and secure-by-design rather than manual administration.\nYou challenge unnecessary permissions and advocate for modern identity governance, Permission Misuse Detection and continuous improvement to build secure, scalable cloud environments.\nYou are curious about emerging identity technologies, enjoy experimenting with new ideas, sharing your knowledge and presenting technical concepts to colleagues and stakeholders. You collaborate across teams to continuously improve the way cloud identity is designed, governed, secured and automated.\n About your benefits:\nIn order to provide you with the best possible support for your individual needs - whether it‘s living a healthy life, having enough time for your family, or developing your skills - we offer a wide range of different, site-specific benefits.\nWelcome days: We want you to feel at home with us from the very first day. Therefore, we welcome you with our comprehensive onboarding program.\nRemote working: While this is a remote position based in Germany, it may require occasional on-site collaboration at our offices in Berlin or Cologne, depending on business and team requirements. For our remote working employees we grant you 500,00 € to set up your office space from home. To create an environment for you and how you work best.\nAnchor days: As per your remote contract there will be some occasions to travel to office for anchor days, this is fully reimbursed including any travelling costs or hotel expenses.\nPersonal development: Grow! We support and encourage your individual development through various in- and external trainings.\nEmployee referral program: Because you know best who fits in with us, successful recommendations are rewarded with a bonus.","description_format":"text","description_chars":6385,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Germany","iso":"DE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Pharmacies"],"lifecycle":[{"event":"open","at":"2026-09-18T20:22:58Z"}],"visa":[],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":1,"p_active":0.572,"p_room":0.28,"age_days":42,"expected_fill_days":21,"reasons":["conf:2","stale_co","urgency","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/redcare-pharmacy-senior-cloud-identity-engineer-mfd-8","json_url":"https://alion.io/job/redcare-pharmacy-senior-cloud-identity-engineer-mfd-8.json","meta":{"generated_at":"2026-10-22T10:53:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8375,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3862},"rest":"https://alion.io/mcp/rest/get_company?id=3862"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fredcare-pharmacy-senior-cloud-identity-engineer-mfd-8"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fredcare-pharmacy-senior-cloud-identity-engineer-mfd-8"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fredcare-pharmacy-senior-cloud-identity-engineer-mfd-8"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/redcare-pharmacy-senior-cloud-identity-engineer-mfd-8\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fredcare-pharmacy-senior-cloud-identity-engineer-mfd-8"}]}