Own and operate Enpal’s workforce Identity & Access Management in Microsoft Entra ID.
Ensure secure and scalable access through Conditional Access and a strong admin model.
Enable least-privilege access via RBAC, PIM/PAM, and recurring access reviews.
Define and maintain IAM standards and guardrails for Entra ID.
Establish and maintain the admin model and enforce least privilege through RBAC.
Operate and continuously improve Microsoft Entra ID as the central identity platform.
Design, implement, and maintain Conditional Access policies.
Build and operate Joiner/Mover/Leaver lifecycle processes.

Strong hands-on experience with Microsoft Entra ID (Azure AD) administration and identity operations.
Deep practical experience implementing Conditional Access (design, rollout, troubleshooting).
Experience building and operating Joiner/Mover/Leaver processes and lifecycle automation.
Strong Experience running access reviews and implementing RBAC (role/group modeling and governance).
Experience with Privileged Identity Management (PIM) and privileged access patterns (admin model, break-glass).
Comfortable working with automation and APIs (e.g., PowerShell, Graph API) to scale IAM operations.

Work in Germany's first green unicorn and actively shape the solar energy revolution.
Hybrid working model.
Modern office in Berlin with amenities like a roof terrace and stocked drinks fridges.
Onboarding day to get to know the team and the founder.
Monthly all-hands meetings with updates on company figures.
Strong team spirit and unforgettable team events.
Strong feedback culture and opportunities for personal growth.

Senior IAM Engineer

Key skills