Senior IAM Security Engineer – Entra ID & Zero‑Trust

Aioi Nissay Dowa Europe; Germany (OH); Hybrid; USD 79,636 - 125,142; Full time

Benefits offered by this job

32 days annual leave

Flexible hours

Home office policy ~60%

Employer pension subsidy

Disability pension

Supplementary health insurance

Capital-forming benefits

Job ticket

Car parking spaces

Monthly travel allowance

EGYM Wellpass

Financial subsidy

Free coffee/tea/water/fruit

Health management & family service

Job summary

AND-E in Germany seeks an experienced IT security engineer to own IAM strategy across Entra ID and Active Directory, manage conditional access, PIM/PAM, and identity lifecycle governance. You will develop identity-centric detections, analyze logs, and partner with Infrastructure, Client Services, and Cloud Admin teams to implement controls across endpoints, email, network, and cloud.

You will act as internal advisor for Splunk Cloud SIEM and Cribl Stream/Edge, collaborate with MSSP on detection

Qualifications

• Bachelor’s degree in IT Security, Cyber Security, or comparable qualification (or equivalent practical experience).
• 5+ years in IT security engineering or operations, with significant hands‑on IAM responsibility.
• Deep expertise in Entra ID, Active Directory, MFA/passwordless, SSO protocols (SAML, OIDC, SCIM), and identity governance.
• Strong foundation in zero‑trust architecture and frameworks such as NIST, ISO 27001, or MITRE ATT&CK.
• Working knowledge of Splunk Cloud SIEM, CyberArk, SailPoint IdentityIQ, and Cribl Stream/Edge.
• Familiarity with AWS, Proofpoint, and Zscaler/Cisco/FortiGate.
• Proficiency in PowerShell, Python, or Microsoft Graph API.
• Very good English communication skills (German desirable).
• Certifications such as Microsoft SC-300, SC-100, AZ-500, CISSP, CIDPRO, AWS Security Specialty, GIAC (GCIH, GCIA, GCFA), or Splunk/Cribl are considered a plus.

Responsibilities

• Own IAM strategy across Entra ID and Active Directory
• Manage conditional access, PIM/PAM, and identity lifecycle governance
• Develop identity-centric detections and threat-hunting workflows, analyzing Entra ID logs and privilege escalation paths in alignment with the SOC
• Partner with Infrastructure, Client Services, and Cloud Admin teams to review and implement controls across endpoint, email, network, and cloud environments
• Act as internal advisor for Splunk Cloud SIEM and Cribl Stream/Edge, partnering with the MSSP on detection engineering and optimization
• Oversee vulnerability management and quality-assure penetration tests
• Serve as senior escalation point for complex SOC investigations
• Mentor SOC analysts and junior engineers
• Contribute to the long-term security roadmap
• Keep leadership informed on risks and developments and maintain clear architecture and process documentation

Skills

IAM

Entra ID

Active Directory

MFA/passwordless

SSO protocols

Zero-trust

NIST

ISO 27001

MITRE ATT&CK

Splunk Cloud SIEM

CyberArk

SailPoint IdentityIQ

Cribl Stream/Edge

PowerShell

Python

Microsoft Graph API

English communication

German desirable

Education

Bachelor’s degree in IT Security

Tools

Splunk Cloud SIEM

CyberArk

SailPoint IdentityIQ

Cribl Stream/Edge

AWS

Proofpoint

Zscaler

Cisco

FortiGate

PowerShell

Python

Microsoft Graph API

Job description

AND-E in Germany seeks an experienced IT security engineer to own IAM strategy across Entra ID and Active Directory, manage conditional access, PIM/PAM, and identity lifecycle governance. You will develop identity-centric detections, analyze logs, and partner with Infrastructure, Client Services, and Cloud Admin teams to implement controls across endpoints, email, network, and cloud.

You will act as internal advisor for Splunk Cloud SIEM and Cribl Stream/Edge, collaborate with MSSP on detection