Cloud Identity Engineer (Entra ID)

LBBW is one of Germany's leading banks and an innovative company in the financial sector. In addition to traditional banking services, we focus on digitalization, sustainability and international markets. We offer an environment that promotes personal and professional development. With over 10,000 employees, we shape the future of the financial world – together #CreatingNewThings. The Progressive Infrastructure Services group is at the forefront of IT development and actively shapes the future of our digital workplace. With a clear focus on modern and future-oriented IT solutions, this group is responsible for three key areas (Cloud, Collaboration and Zero Trust Infrastructure), which are crucial for efficiency, security and collaboration within the company.

• Operation and further development of Microsoft Entra ID in a multi-tenant environment with Azure and Microsoft 365 usage
• Design of cross-tenant scenarios for foreign branches, including cross-tenant synchronization, B2B collaboration and multi-tenant organization
• Control of Conditional Access, authentication methods (MFA, passwordless) and Entra ID Protection
• Establishment and further development of Identity Governance, including Privileged Identity Management, Access Reviews, Entitlement Management and lifecycle processes
• Management of Workload Identities (app registrations, service principals, managed identities) and the authorization model for Entra and Azure roles
• Support of hybrid identity connection to Active Directory via Entra Connect and Cloud Sync
• Automation via Microsoft Graph, PowerShell and Infrastructure as Code
• Implementation of regulatory requirements (e.g. DORA, MaRisk) as central contact for audit, examiners and information security

• Completed degree in (Business) Informatics or comparable qualification plus several years of professional experience in Identity and Access Management
• Deep practical experience with Microsoft Entra ID in complex enterprise environments, ideally with multiple tenants and international locations
• Very good knowledge of Conditional Access, PIM and Identity Governance as well as OAuth 2.0, OpenID Connect and SAML protocols
• Solid understanding of Azure RBAC, Microsoft 365 and hybrid identities with Active Directory
• Experience in automation with Microsoft Graph and PowerShell, knowledge of Terraform or Bicep an advantage
• Experience in regulated environments, ideally in the financial sector, and confident handling of audit and revision requirements
• Certifications such as SC-300 or SC-100 desirable
• Independent, structured working style and ability to communicate complex issues appropriately up to management level
• Fluent German (at least C1) and very good written and spoken English