Cloud & Identity Engineer

LUZA Group; Lisboa; Hybrid; EUR 45,000 - 70,000; Full time

Benefits offered by this job

Remote work whenever possible

Health insurance from start

Work equipment provided

Job summary

LUZA Group is seeking an IAM professional to manage hybrid identity environments across on‑premises Active Directory, Microsoft Entra ID, AWS and Azure. You will handle user provisioning, app registrations and enterprise applications within a secure access framework.

The role requires experience with Entra ID, Conditional Access, MFA and RBAC, plus governance tooling like Defender and Purview. A hybrid, remote-friendly setup is offered with equipment and health coverage.

Qualifications

• Experience with Microsoft Entra ID and Conditional Access
• Experience in hybrid environments with AWS and Exchange Online
• Knowledge of Defender, Purview and Power BI governance
• Understanding of identity management, security principles and compliance
• Experience implementing IAM solutions
• Ability to troubleshoot access management across enterprise environments

Responsibilities

• Manage hybrid identity environments across on-premises AD, Entra ID, AWS and Azure
• Administer Entra ID including user/group management and applications
• Configure and maintain CA, MFA, PIM and RBAC policies
• Manage identity governance, access reviews and privileged access
• Administer Exchange Online and hybrid environments including mail flow
• Manage access permissions and user provisioning across AWS
• Support deployment of Defender, Purview and Power BI governance
• Provide operational support for security, compliance and IAM activities
• Implement and maintain IAM solutions aligning with best practices

Skills

Microsoft Entra ID

Conditional Access

MFA

RBAC

AWS

Exchange Online

Power BI governance

Tools

Azure AD

Exchange Online

Power BI

Microsoft Defender

Microsoft Purview

Entra ID

Job description

Luza is an all-inclusive consulting company focused on talent, tech and innovation. We exist to elevate companies and humans all around the world, making change, from the inside to the outside.

We believe that technology + human kindness positively impacts every community around the world. Our approach is simple, we see a world without borders, and believe in equal opportunities. We are guided by our core principles of spreading positivity, good energy and promote equality and care for others.

Our hiring process is unique! People are selected by their value, education, talent and personality. We dont present ethnicity, religion, national origin, age, gender, sexual orientation or identity.

Its time to burst the bubble, and we will do it together!

What You'll do:

• Manage hybrid identity environments across on-premises Active Directory, Microsoft Entra ID, AWS and Azure.
• Administer Entra ID, including user and group management, application registrations and enterprise applications.
• Configure and maintain Conditional Access, MFA, PIM and RBAC policies.
• Manage identity governance, access reviews, privileged access and hybrid identity synchronization.
• Administer Exchange Online and hybrid environments, including mailboxes, mail flow, policies and troubleshooting.
• Manage access permissions and user provisioning across AWS environments.
• Support the implementation and configuration of Microsoft Defender, Microsoft Purview and Power BI governance.
• Provide operational support for security, compliance and IAM-related activities.
• Implement and maintain IAM solutions, ensuring alignment with security best practices.

What You Are:

• Experienced in Microsoft Entra ID, Conditional Access, MFA, PIM and RBAC.
• Skilled in managing AWS, Exchange Online and on-premises Active Directory within hybrid environments.
• Knowledgeable in Microsoft Defender, Microsoft Purview and Power BI governance, including workspace management.
• Familiar with identity and access management, security principles and compliance requirements.
• Experienced in setting up, configuring and implementing IAM solutions.
• Comfortable managing hybrid and multi-cloud environments across Microsoft Azure and AWS.
• Able to troubleshoot operational issues and ensure secure, efficient access management across enterprise environments.

What youll get:

• Wage according to candidate's professional experience;
• Remote Work whenever possible;
• Allocation of health insurance from the beginning of the employment;
• Delivery of work equipment adjusted to the performance of functions;
• And others.

Work together with expert teams on projects of large magnitude and intensity, long term together with our clients, all leaders in their industries.

Are you ready to step into a diverse and inclusive world with us?

Together we will promote uniquess!