Cloud Identity & Access Engineer

Coinscapture; Northern (KY); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Competitive compensation

Career growth and learning

Flexibility and ownership

Collaborative and innovative culture

International environment and talented

Job summary

Nebius is seeking a Cloud Workplace Engineer to own the company’s identity and access management stack across Microsoft Entra ID and Google Cloud services. You will design, implement, and operate identity platforms, authentication methods, and app onboarding with a strong emphasis on automation and security.

You will collaborate with security, operations, and engineering teams to ensure scalable, compliant access controls and efficient provisioning across SaaS and internal apps.

Qualifications

• 3+ years administering Microsoft Entra ID in production.
• Experience with Enterprise applications and automated provisioning.
• Strong PowerShell and REST API skills.
• Knowledge of Google Workspace admin and Cloud Identity administration.

Responsibilities

• Own Microsoft Entra ID and Microsoft 365 configurations including users, groups, and roles.
• Design and rollout Conditional Access, authentication methods, and app registrations.
• Manage SCIM provisioning, tenant consent, and OAuth/OIDC integrations.
• Automate lifecycle and governance for service accounts and workload identities.

Skills

SAML/JWT decoding

SCIM provisioning

PowerShell scripting

Microsoft Entra ID

Azure Automation

Google Workspace admin

Education

Bachelor’s degree in a relevant field

Tools

Microsoft Graph API

GCloud IAM

Terraform

Job description

Nebius is seeking a Cloud Workplace Engineer to own the company’s identity and access management stack across Microsoft Entra ID and Google Cloud services. You will design, implement, and operate identity platforms, authentication methods, and app onboarding with a strong emphasis on automation and security.

You will collaborate with security, operations, and engineering teams to ensure scalable, compliant access controls and efficient provisioning across SaaS and internal apps.