Microsoft Entra ID Engineer - Lead IAM (m/f/d)

Your tasks: You make a difference with us.

• Take ownership of and continuously improve our existing IAM platform, ensuring stable and reliable operations of all identity lifecycle processes (Joiner, Mover, Leaver) within a team responsible for Tchibo datacenter operations and M365 cloud workloads
• Support and collaborate closely with the existing IAM team – consisting of international colleagues across Europe and Asia – in day-to-day operations, including monitoring of job queues, system integrations, and incident response and our daily operation shifts
• Drive the strategic evolution of our IAM Services (OneIdentity, Active Directory, Entra ID) with a forward-looking vision to bring IAM technologies to the cloud and move toward a serverless architecture where possible
• Define, implement, and enforce IAM policies, access controls, and security standards across the organization
• Take responsibility for the future IAM architecture, thinking ahead with technologies such as Active Directory, Entra ID, OneIdentity, other on-premises IAM solutions, SQL Server, Windows Server, and Hyper-V
• Manage and optimize integrations between our IAM platform and connected systems (e.g., SAP, Active Directory, Entra ID, ServiceNow)
• Automate identity lifecycle processes and administrative tasks to reduce manual effort and increase reliability
• Act as a key contributor in IAM-related projects, bringing both technical depth and a structured approach to delivery
• Collaborate with stakeholders from IT Security, Infrastructure, and business departments as a trusted identity expert
• Gradually take on increased technical responsibility within the team, growing into a go-to role for architectural decisions and technical guidance
• Open to grow into a technical leadership role for the whole IAM

Your profile: You keep discovering with us.

• Several years of hands-on experience in Identity & Access Management, with deep knowledge of IAM architecture and identity lifecycle processes
• Strong practical knowledge of Microsoft Entra ID and the broader Microsoft 365 ecosystem, ideally including Entra ID Governance features
• Experience with on-premise IAM solutions and familiarity with migration or modernization projects (e.g., transitioning from legacy IAM platforms to cloudnative solutions)
• Solid understanding of directory services, particularly Active Directory and its integration with cloud identity platforms
• Experience with scripting and automation (e.g., PowerShell, Graph API) to streamline IAM processes
• Proven ability to work effectively in a team environment, with strong communication skills and a collaborative mindset
• A structured, ownership-driven approach to both operations and project work
• Experience with using AI in your daily business
• Very good knowledge of English; German is an advantage

Nice to have:

• Hands-on experience with OneIdentity Manager or comparable enterprise IAM platforms
• Knowledge of identity governance standards and frameworks (e.g., RBAC, SoD, least privilege principles)
• Basic understanding of Azure services and how they interconnect with the Microsoft 365 ecosystem (e.g., Azure Functions, Azure Logic Apps, Azure Monitor)
• Entra ID Governance Know How
• KnowHow in SAP IAM Platforms

Your benefits: Together we stay different.

• Work-Life Balance: Flexible, hybrid working policy with 26 vacation days + your birthday off.
• Benefits: Monthly transport allowance (80 RON/month), meal tickets, and health/life insurance.
• Personal Perks: Free Tchibo coffee for home, and the chance to work on cutting-edge technology in a dynamic environment.
• Innovative Work Environment: We are a forward-thinking team where creativity and innovation are encouraged. You will collaborate with talented professionals and contribute to building Tchibo Tech, shaping the future of our technology landscape.
• Inclusive Culture: A diverse and inclusive workplace where your unique perspectives and ideas are valued, fostering a culture of collaboration and mutual respect.
• Impactful Work: Our meaningful projects make a real difference, driving positive change and contributing to the success of Tchibo.