Remote-Ready Hybrid Cloud & Identity Engineer

LUZA Group; Lisboa; Hybrid; EUR 45,000 - 70,000; Full time

Benefits offered by this job

Remote work whenever possible

Health insurance from start

Work equipment provided

Job summary

LUZA Group is seeking an IAM professional to manage hybrid identity environments across on‑premises Active Directory, Microsoft Entra ID, AWS and Azure. You will handle user provisioning, app registrations and enterprise applications within a secure access framework.

The role requires experience with Entra ID, Conditional Access, MFA and RBAC, plus governance tooling like Defender and Purview. A hybrid, remote-friendly setup is offered with equipment and health coverage.

Qualifications

• Experience with Microsoft Entra ID and Conditional Access
• Experience in hybrid environments with AWS and Exchange Online
• Knowledge of Defender, Purview and Power BI governance
• Understanding of identity management, security principles and compliance
• Experience implementing IAM solutions
• Ability to troubleshoot access management across enterprise environments

Responsibilities

• Manage hybrid identity environments across on-premises AD, Entra ID, AWS and Azure
• Administer Entra ID including user/group management and applications
• Configure and maintain CA, MFA, PIM and RBAC policies
• Manage identity governance, access reviews and privileged access
• Administer Exchange Online and hybrid environments including mail flow
• Manage access permissions and user provisioning across AWS
• Support deployment of Defender, Purview and Power BI governance
• Provide operational support for security, compliance and IAM activities
• Implement and maintain IAM solutions aligning with best practices

Skills

Microsoft Entra ID

Conditional Access

MFA

RBAC

AWS

Exchange Online

Power BI governance

Tools

Azure AD

Exchange Online

Power BI

Microsoft Defender

Microsoft Purview

Entra ID

Job description

LUZA Group is seeking an IAM professional to manage hybrid identity environments across on‑premises Active Directory, Microsoft Entra ID, AWS and Azure. You will handle user provisioning, app registrations and enterprise applications within a secure access framework.

The role requires experience with Entra ID, Conditional Access, MFA and RBAC, plus governance tooling like Defender and Purview. A hybrid, remote-friendly setup is offered with equipment and health coverage.