Remote IAM & Cloud Identity Engineer

Welvaart; Lisboa; Hybrid; EUR 55,000 - 75,000; Full time

Benefits offered by this job

Training & Certification

Career Path management

Welvaart Ambassador Program

Equity salary structure

Job summary

Welvaart is seeking a Cloud and Identity Engineer to manage identity and access across multi-cloud and on-premises environments from Lisbon, with remote work options. The role focuses on IAM governance, security policies, and operational support within Azure, AWS, and Exchange Online.

You will implement and maintain Conditional Access, MFA, and PIM, while ensuring secure access governance and efficient identity lifecycle management across platforms. Collaboration with stakeholders is essential.

Qualifications

• Experience with Microsoft Entra ID and hybrid identity environments.
• Experience implementing Conditional Access, MFA, and RBAC across cloud and on-premises assets.
• Experience with identity governance, access reviews and privileged access management.

Responsibilities

• Administer Microsoft Entra ID environments and manage users, groups, and app registrations.
• Define and maintain Conditional Access policies and MFA configurations.
• Manage RBAC across subscriptions, resources, and applications.
• Oversee hybrid identity setups between AD and Entra ID and AD Connect.
• Administer Exchange Online and hybrid Exchange environments; manage mail flow and policies.
• Support security and compliance initiatives and contribute to IAM governance.

Skills

Microsoft Entra ID

Active Directory

Azure AD Connect

Conditional Access

MFA

PIM

RBAC

Identity & Access Management

IAM governance

Tools

Power BI

Azure

AWS

Exchange Online

Job description

Welvaart is seeking a Cloud and Identity Engineer to manage identity and access across multi-cloud and on-premises environments from Lisbon, with remote work options. The role focuses on IAM governance, security policies, and operational support within Azure, AWS, and Exchange Online.

You will implement and maintain Conditional Access, MFA, and PIM, while ensuring secure access governance and efficient identity lifecycle management across platforms. Collaboration with stakeholders is essential.