Design and implementation of identity governance processes (Joiner‑Mover‑Leaver, Birthright Access, recertifications, request/approval workflows) in Microsoft Entra ID Governance
Lifecycle & provisioning: modeling identities, roles (RBAC/ABAC) and policies; integration of HR systems (e.g., SAP/Workday) and target systems via SCIM/REST/AD/Entra, including connector design
Access reviews & entitlement management: implementation of campaigns, SoD rules, delegation and recertification processes; automation of controls
Privileged access & compliance: integration with PIM, logging/monitoring and regulatory requirements (e.g., ISO 27001, SOX, NIS2/DORA – customer-specific)
Adoption & enablement: workshops, guidelines, operational concepts; leading workstreams from a subject-matter perspective, mentoring and quality assurance (concept/design reviews)
Requirements
Passion for identity and access topics
Structured working style and willingness to learn
Basic knowledge of Microsoft Entra ID, AD DS and common authentication/authorization protocols (LDAP, Kerberos, OAuth 2.0, OIDC, SAML)
For junior profiles: initial hands‑on experience in IGA or IAM (e.g., access reviews, entitlement requests, provisioning)
Basic skills in PowerShell/SQL or REST/SCIM APIs and understanding of Joiner‑Mover‑Leaver processes
For experienced profiles (Senior/Architect): several years of end‑to‑end experience in designing and implementing an IGA suite (Microsoft Entra ID Governance, One Identity, SailPoint, Omada)