Entra ID & 365 Engineer — Remote Europe

Nebius Group; Amsterdam; Remote; EUR 80,000 - 110,000; Full time

Benefits offered by this job

Competitive compensation

Career growth and learning

Flexibility and ownership

Collaborative and innovative culture

Impactful AI projects

Job summary

Nebius is seeking a Microsoft 365 Engineer to join our European remote team. You will own the identity provider, including sign-in locations, factors, and access across applications, with Microsoft Entra ID at the core.

The role covers tenant and licensing management, and you will be the escalation point for identity incidents across operations and security. You'll design and implement conditional access, onboarding of apps via SAML 2.0 and OIDC, manage SCIM provisioning, and enforce

Qualifications

• 3+ years administering Microsoft Entra ID in production.
• Experience with Microsoft 365 tenant settings and licensing.
• Knowledge of Exchange Online mailbox permissions and mail flow.
• Familiarity with Defender, Power Platform, and automation tooling.
• Proficient English communication (B2+).

Responsibilities

• Manage Microsoft Entra ID and Microsoft 365 configurations.
• Design and rollout Conditional Access policies.
• Manage authentication methods and phishing-resistant factors.
• Onboard apps via SAML 2.0 and OIDC / OAuth 2.0.
• Handle app registrations lifecycles and SCIM provisioning.
• Configure tenant settings, licensing, and admin roles.
• Monitor sign-in and provisioning logs and diagnostics.
• Respond to identity incidents as escalation point.

Skills

Microsoft Entra ID

Microsoft 365

Conditional Access

SAML 2.0

JWT

PowerShell

Graph REST API

RBAC

PIM

English (B2+)

Tools

Microsoft Graph PowerShell SDK

Graph REST API

Job description

Nebius is seeking a Microsoft 365 Engineer to join our European remote team. You will own the identity provider, including sign-in locations, factors, and access across applications, with Microsoft Entra ID at the core.

The role covers tenant and licensing management, and you will be the escalation point for identity incidents across operations and security. You'll design and implement conditional access, onboarding of apps via SAML 2.0 and OIDC, manage SCIM provisioning, and enforce