Senior Cloud Identity Engineer (m/f/d) Cologne Posted on 09.09.2026

Redcare Pharmacy; Köln; Hybrid; EUR 90.000 - 120.000; Vollzeit

Zusammenfassung

Redcare Pharmacy seeks a Senior Cloud Identity Engineer to shape the future of identity in our Microsoft Cloud environment. You will build secure, scalable identity solutions that empower decentralized teams while maintaining governance and Zero Trust guardrails.

As part of Cloud & Security, you will drive identity across Azure, Entra, Graph API, and governance tooling, enabling AI-ready cloud platforms and secure workloads. Prioritizing Least Privilege and automated processes is essential.

Qualifikationen

• Design secure identity architectures with strong governance.
• Implement scalable, automated identity solutions across Azure and Entra.
• Enforce Least Privilege and Zero Trust principles across platforms.

Aufgaben

• Define and implement secure identity architectures for Microsoft Cloud environments.
• Collaborate with security and engineering teams to govern identities and access.

Kenntnisse

Zero Trust

Least Privilege

Identity Governance

Automation

Security Architecture

Tools

Microsoft Entra

Microsoft Graph API

Azure Policy

Azure RBAC

Managed Identities

Conditional Access

PowerShell

Bash

Logic Apps

Azure Functions

Log Analytics

Kusto Query Language

Jobbeschreibung

About Redcare Pharmacy

As Europe’s No. 1 e-pharmacy, Redcare Pharmacy is powered by passionate teams and cutting-edge innovation. We strive to create a healthy, collaborative work environment where every employee feels valued and inspired to contribute to our vision: “Until every human has their health.” If you’re seeking a career that offers purpose and aligns with your values, join us and start your #Redcareer today.

About the role

We are looking for a Senior Cloud Identity Engineer to help shape the future of identity engineering in our Microsoft Cloud environment. You will build secure, scalable and highly automated identity solutions that empower decentralized teams to innovate independently while operating within clear governance, Zero Trust principles and Least Privilege guardrails.

As part of our Cloud & Security team, you will help define the future of identity across Azure, Data, ERP and AI platforms, driving modern approaches for human, workload and AI-driven identities. From Identity Blueprints and agent identities to enterprise-wide governance, you will have the opportunity to influence strategic cloud security initiatives and establish identity as the foundation of a secure, scalable and AI-ready cloud platform.

About the tech stack

Core technologies

You will work with a modern Microsoft Cloud identity ecosystem, leveraging technologies such as Microsoft Entra, Microsoft Graph API, Microsoft Entra ID Governance (including Access Reviews), Azure, Azure RBAC, Entra RBAC, Azure Policy, Azure Key Vault, Managed Identities, Enterprise Applications, App Registrations, Service Principals, Certificate Lifecycle Management, Administrative Units, Conditional Access, Identity Protection, Workload Identity Federation, Microsoft Sentinel, Azure Monitor, Log Analytics, Kusto Query Language (KQL), Microsoft 365, Active Directory (Core Services), OAuth 2.0 and OpenID Connect.

You will help design secure identity architectures with a strong focus on Least Privilege, Azure Policy, Guardrails and Governance, as well as Permission Misuse Detection & Identity Monitoring.

Automation is a key part of this role, using PowerShell and Bash, alongside Microsoft Graph API, Azure Functions or Logic Apps, to build secure, scalable identity solutions and governance processes that follow Zero Trust and the Least Privilege principle across Azure and Microsoft Entra services.

Nice to have

As we continue to evolve our cloud identity platform for AI-driven and autonomous workloads, experience with modern AI-assisted engineering tools (e.g. GitHub Copilot, Claude Code, Codex or similar AI coding assistants) as well as Microsoft technologies such as Entra Agent ID, Identity Blueprints and Microsoft 365 Agents / Copilot is considered a plus.