Microsoft Entra ID Engineer - Lead IAM

• Take ownership of and continuously improve our existing IAM platform, ensuring stable and reliable operations of all identity lifecycle processes (Joiner, Mover, Leaver) within a team responsible for Tchibo datacenter operations and M365 cloud workloads
• Support and collaborate closely with the existing IAM team - consisting of international colleagues across Europe and Asia - in day-to-day operations, including monitoring of job queues, system integrations, and incident response and our daily operation shifts
• Drive the strategic evolution of our IAM Services (OneIdentity, Active Directory, Entra ID) with a forward-looking vision to bring IAM technologies to the cloud and move toward a serverless architecture where possible
• Define, implement, and enforce IAM policies, access controls, and security standards across the organization
• Take responsibility for the future IAM architecture, thinking ahead with technologies such as Active Directory, Entra ID, OneIdentity, other on-premises IAM solutions, SQL Server, Windows Server, and Hyper-V
• Manage and optimize integrations between our IAM platform and connected systems (e.g., SAP, Active Directory, Entra ID, ServiceNow)
• Automate identity lifecycle processes and administrative tasks to reduce manual effort and increase reliability
• Act as a key contributor in IAM-related projects, bringing both technical depth and a structured approach to delivery
• Collaborate with stakeholders from IT Security, Infrastructure, and business departments as a trusted identity expert
• Gradually take on increased technical responsibility within the team, growing into a go-to role for architectural decisions and technical guidance
• Open to grow into a technical leadership role for the whole IAM

• Several years of hands-on experience in Identity & Access Management, with deep knowledge of IAM architecture and identity lifecycle processes
• Strong practical knowledge of Microsoft Entra ID and the broader Microsoft 365 ecosystem, ideally including Entra ID Governance features
• Experience with on-premise IAM solutions and familiarity with migration or modernization projects (e.g., transitioning from legacy IAM platforms to cloudnative solutions)
• Solid understanding of directory services, particularly Active Directory and its integration with cloud identity platforms
• Experience with scripting and automation (e.g., PowerShell, Graph API) to streamline IAM processes
• Proven ability to work effectively in a team environment, with strong communication skills and a collaborative mindset
• A structured, ownership-driven approach to both operations and project work
• Experience with using AI in your daily business
• Very good knowledge of English; German is an advantage

Nice to have:

• Hands-on experience with OneIdentity Manager or comparable enterprise IAM platforms
• Knowledge of identity governance standards and frameworks (e.g., RBAC, SoD, least privilege principles)
• Basic understanding of Azure services and how they interconnect with the Microsoft 365 ecosystem (e.g., Azure Functions, Azure Logic Apps, Azure Monitor)

Tchibo is one of the ten largest eCommerce companies in Germany. We could never have attained this standing without the courage to constantly rethink the old ways. In the digital world at Tchibo, we work with the latest technologies to develop sustainable and effective solutions. Do you want to help us do this? Enrich our team with your fresh ideas! Your tasks: You make a difference with us., * KnowHow in SAP IAM Platforms

Your benefits: Together we stay different.

• Work-Life Balance: Flexible, hybrid working policy with 26 vacation days + your birthday off.
• Benefits: Monthly transport allowance (80 RON/month), meal tickets, and health/life insurance.
• Personal Perks: Free Tchibo coffee for home, and the chance to work on cutting-edge technology in a dynamic environment.
• Innovative Work Environment: We are a forward-thinking team where creativity and innovation are encouraged. You will collaborate with talented professionals and contribute to building Tchibo Tech, shaping the future of our technology landscape.
• Inclusive Culture: A diverse and inclusive workplace where your unique perspectives and ideas are valued, fostering a culture of collaboration and mutual respect.
• Impactful Work: Our meaningful projects make a real difference, driving positive change and contributing to the success of Tchibo.