AI/M365 Security and Identity Governance Engineer

Jobtailor; Deutschland; Remote; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

Jobtailor is seeking an accomplished security architect for cloud identity and data-protection work in Germany. The role focuses on design, implementation, and governance of Entra ID, RBAC, Conditional Access, and Azure Policy across Microsoft 365 workloads and Azure services.

You will collaborate with compliance teams, develop security standards, and guide delivery teams while leading initiatives to improve reliability, scalability, and security postures in complex environments.

Qualifikationen

• 6+ years in Microsoft cloud security or identity engineering.
• Hands-on expertise with Entra ID, CA, RBAC, PIM, Azure Policy and secure Azure networking.
• Experience implementing Purview, M365 security, or data-protection controls.
• Working knowledge of NIST-based controls and regulated-environment delivery.
• Balance secure design with practical adoption and delivery outcomes.
• Azure Government or GCC High experience is a plus.
• SC-300/SC-100/SC-200 are nice-to-have certifications.
• AI-security, data-governance, or Zero Trust experience is a bonus.

Aufgaben

• Design and implement Entra ID, Conditional Access, privileged access, RBAC, and identity-lifecycle controls.
• Establish security patterns for Azure AI Foundry, AVD, Power Platform, and Microsoft 365 workloads.
• Implement Azure Policy, private networking, logging, audit, and security monitoring requirements.
• Collaborate with Purview and compliance teams on data classification, DLP, retention, and information-protection controls.
• Conduct design reviews, risk assessments, and control validation with engineering and customer security stakeholders.
• Develop security standards and operational procedures for delivery and O&M teams.
• Operate independently or as a team lead.
• Select persistence technologies and define source control strategies.
• Design subsystem infrastructure and improve system reliability and scalability.
• Manage cross-functional delivery and provide functional leadership.
• Troubleshoot advanced client issues and support requirements gathering.
• Contribute to vendor presentations or proposal activities.

Kenntnisse

Entra ID

Conditional Access

RBAC

PIM

Azure Policy

secure Azure networking

Microsoft Purview

M365 Security

NIST-Based Controls

Zero Trust

AI-Security

Ausbildung

Certifications & Qualifications: SC-300/100/200

Tools

Azure AI Foundry

AVD

Power Platform

Microsoft 365

Jobbeschreibung

• Design and implement Entra ID, Conditional Access, privileged access, RBAC, and identity-lifecycle controls
• Establish security patterns for Azure AI Foundry, AVD, Power Platform, and Microsoft 365 workloads
• Implement Azure Policy, private networking, logging, audit, and security monitoring requirements
• Collaborate with Purview and compliance teams on data classification, DLP, retention, and information-protection controls
• Conduct design reviews, risk assessments, and control validation with engineering and customer security stakeholders
• Develop security standards and operational procedures for delivery and O&M teams
• Operate independently or as a team lead
• Select persistence technologies and define source control strategies
• Design subsystem infrastructure and improve system reliability and scalability
• Manage cross-functional delivery and provide functional leadership
• Troubleshoot advanced client issues and support requirements gathering
• Contribute to vendor presentations or proposal activities

Requirements

• 6+ years in Microsoft cloud security or identity engineering
• Hands-on expertise with Entra ID, Conditional Access, RBAC, PIM, Azure Policy, and secure Azure networking
• Experience implementing Microsoft Purview, M365 security, or data-protection controls
• Working knowledge of NIST-based controls and regulated-environment delivery
• Ability to balance secure design with practical adoption and delivery outcomes
• Azure Government or GCC High experience (nice to have)
• Microsoft security certifications such as SC-300, SC-100, or SC-200 (nice to have)
• AI-security, data-governance, or Zero Trust implementation experience (nice to have)

Core Competencies

Demonstrates expertise in Microsoft cloud security and identity engineering, with a focus on implementing Entra ID, Conditional Access, and Azure Policy. Proven ability to develop security standards and collaborate with cross-functional teams to ensure compliance and operational excellence.

Highest-signal resume keywords

• Microsoft Cloud Security
• Entra ID Implementation
• Conditional Access Management
• Azure Policy Expertise
• Data Protection Controls

Hard Skills

• Entra ID
• Conditional Access
• RBAC
• Azure Policy
• Secure Azure Networking
• Microsoft Purview
• M365 Security
• NIST-Based Controls
• Zero Trust Implementation
• AI-Security

Soft Skills

• Collaboration
• Leadership
• Problem-Solving
• Risk Assessment
• Communication

Certifications & Qualifications

• SC-300
• SC-100
• SC-200

Industry Keywords

• Identity-Lifecycle Controls
• Security Monitoring
• Operational Procedures
• Regulated Environment Delivery
• Vendor Presentations

Tools & Technologies

• Azure AI Foundry
• AVD
• Power Platform
• Microsoft 365
• Data Loss Prevention (DLP)
• Information Protection