> Markdown version of [/jobs/ext/2144148-microsoft-entra-id-engineer-lead-iam](https://www.wearedevelopers.com/jobs/ext/2144148-microsoft-entra-id-engineer-lead-iam). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Microsoft Entra ID Engineer - Lead IAM - **Company:** Tchibo GmbH - **Location:** Hamburg, Germany - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Artificial Intelligence, Microsoft Azure, Cyber Security, Hyper-V, Identity and Access Management, Microsoft SQL Server, Windows Servers, Windows PowerShell, Role-Based Access Control, Azure Active Directory, SAP (Applications), Systems Integration, Network Switches, Cloud Monitoring, Graphql, Serverless Computing, Servicenow - **Published:** August 20, 2026 - **Apply:** https://www.careerjet.de/jobad/de5efd3af27136eb701681a9dc92c59376 ## About the Role * Several years of hands-on experience in Identity & Access Management, with deep knowledge of IAM architecture and identity lifecycle processes * Strong practical knowledge of Microsoft Entra ID and the broader Microsoft 365 ecosystem, ideally including Entra ID Governance features * Experience with on-premise IAM solutions and familiarity with migration or modernization projects (e.g., transitioning from legacy IAM platforms to cloudnative solutions) * Solid understanding of directory services, particularly Active Directory and its integration with cloud identity platforms * Experience with scripting and automation (e.g., PowerShell, Graph API) to streamline IAM processes * Proven ability to work effectively in a team environment, with strong communication skills and a collaborative mindset * A structured, ownership-driven approach to both operations and project work * Experience with using AI in your daily business * Very good knowledge of English; German is an advantage Nice to have: * Hands-on experience with OneIdentity Manager or comparable enterprise IAM platforms * Knowledge of identity governance standards and frameworks (e.g., RBAC, SoD, least privilege principles) * Basic understanding of Azure services and how they interconnect with the Microsoft 365 ecosystem (e.g., Azure Functions, Azure Logic Apps, Azure Monitor) ## Description * Take ownership of and continuously improve our existing IAM platform, ensuring stable and reliable operations of all identity lifecycle processes (Joiner, Mover, Leaver) within a team responsible for Tchibo datacenter operations and M365 cloud workloads * Support and collaborate closely with the existing IAM team - consisting of international colleagues across Europe and Asia - in day-to-day operations, including monitoring of job queues, system integrations, and incident response and our daily operation shifts * Drive the strategic evolution of our IAM Services (OneIdentity, Active Directory, Entra ID) with a forward-looking vision to bring IAM technologies to the cloud and move toward a serverless architecture where possible * Define, implement, and enforce IAM policies, access controls, and security standards across the organization * Take responsibility for the future IAM architecture, thinking ahead with technologies such as Active Directory, Entra ID, OneIdentity, other on-premises IAM solutions, SQL Server, Windows Server, and Hyper-V * Manage and optimize integrations between our IAM platform and connected systems (e.g., SAP, Active Directory, Entra ID, ServiceNow) * Automate identity lifecycle processes and administrative tasks to reduce manual effort and increase reliability * Act as a key contributor in IAM-related projects, bringing both technical depth and a structured approach to delivery * Collaborate with stakeholders from IT Security, Infrastructure, and business departments as a trusted identity expert * Gradually take on increased technical responsibility within the team, growing into a go-to role for architectural decisions and technical guidance * Open to grow into a technical leadership role for the whole IAM ## Related Videos - [Inside Mercedes-Benz: How CIO Katrin Lehmann is Empowering 5,000 Developers and Driving Digital Change](https://www.wearedevelopers.com/videos/1360-inside-mercedes-benz-how-cio-katrin-lehmann-is-empowering-5-000-developers-and-driving-digital-change) - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Putting the Graph In GraphQL With The Neo4j GraphQL Library](https://www.wearedevelopers.com/videos/257-putting-the-graph-in-graphql-with-the-neo4j-graphql-library) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases) - [GraphQL + Apollo + Next.js: A Lovely Trio](https://www.wearedevelopers.com/videos/311-graphql-apollo-next-js-a-lovely-trio) ## Related Articles - [Finding Jobs in Germany](https://www.wearedevelopers.com/magazine/375-finding-jobs-in-germany) - [Finding IT & Technology English-speaking Jobs in Germany ](https://www.wearedevelopers.com/magazine/446-finding-it-technology-english-speaking-jobs-in-germany) - [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies) - [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany) - [Where to Find German Tech Jobs](https://www.wearedevelopers.com/magazine/366-where-to-find-german-tech-jobs) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)