Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 37 days ago

Senior IAM Engineer - Entra ID

RELEX Solutions43 open roles

Where
Helsinki, Finland; Stockholm, Sweden
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior IAM Engineer - Entra IDRELEX Solutions · Helsinki, Finland; Stockholm, Sweden

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on RELEX Solutions's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: posted 37 days ago

The posting

About the Role

RELEX is looking for a Senior IAM Engineer, specializing in Entra ID, to join our Identity & Access Management (IAM) and Security team. This role owns the design, implementation, and ongoing operation of our Microsoft Entra ID (Azure AD) environment, ensuring secure, scalable, and automated identity solutions across the organization. The ideal candidate combines deep Entra ID and IAM expertise with broader Azure infrastructure knowledge and a DevOps mindset, automating the monitoring, management, and governance of Entra ID resources through Microsoft Graph API, Azure Logic Apps, and Azure Functions.

Technical Role Accountability

  • Act as the technical owner and escalation point for the Entra ID environment: architecture decisions, configuration changes, and operational health.
  • Accountable for the security, availability, and compliance posture of Entra ID and related Azure identity infrastructure, including sign-off on changes with security or governance impact.
  • Drive continuous improvement of identity governance by automating monitoring, alerting, and reporting on Entra ID resources (users, groups, apps, roles, policies) rather than relying on manual reviews.
  • Own the audit trail for identity changes: ensure automated logging, alerting, and remediation workflows are in place to catch drift, misconfigurations, or policy violations early.
  • Partner with Security and Infrastructure leadership to define governance KPIs (e.g., access review completion, stale account cleanup, privileged role usage) and report on them.

Key Responsibilities

  • Design, configure, and maintain Microsoft Entra ID (Azure AD), including conditional access policies, identity governance, PIM, and access reviews.
  • Own end-to-end identity and access management processes: user lifecycle management, role-based access control (RBAC), single sign-on (SSO), and multi-factor authentication (MFA).
  • Automate the monitoring and management of Entra ID resources (users, groups, app registrations, roles, licenses, policies) for stronger governance, using Microsoft Graph API, Azure Logic Apps, and Azure Functions to detect drift, enforce policy, and trigger remediation.
  • Develop and maintain automation for identity operations using Microsoft Graph API, Azure Logic Apps, Azure Functions, and PowerShell/Graph SDK.
  • Build event-driven automation (e.g., Event Grid triggers, scheduled/Timer-triggered Functions, Automation Account runbooks) to react to identity events in near real time rather than relying on periodic manual checks.
  • Apply security best practices and compliance standards (Zero Trust, least privilege, SOC2/ISO 27001) across the identity landscape.
  • Integrate Entra ID with enterprise applications (SAML, OIDC, OAuth2, SCIM provisioning).
  • Work across the broader Azure infrastructure stack (subscriptions, resource groups, networking, Key Vault, storage, monitoring/Log Analytics) to ensure identity controls are properly integrated with the underlying cloud environment.
  • Build and maintain CI/CD pipelines and infrastructure-as-code for identity configuration changes (DevOps practices applied to IAM).
  • Monitor, audit, and respond to identity-related security incidents; support investigations and threat detection.
  • Collaborate with Security, Infrastructure, and Application teams to embed identity security into broader IT and DevOps workflows.
  • Document architecture, processes, and runbooks, and mentor junior team members on IAM and Entra ID practices.

Required Qualifications

  • 7+ years of experience in Identity and Access Management, with strong hands-on expertise in Microsoft Entra ID (Azure AD).
  • Proven experience with IAM concepts: RBAC, SSO, MFA, conditional access, privileged identity management (PIM), and identity governance.
  • Strong background in IT/cloud security, including familiarity with Zero Trust architecture and common compliance frameworks.
  • Practical experience automating monitoring, management, and governance of Entra ID resources using Microsoft Graph API, Azure Logic Apps, and Azure Functions.
  • Familiarity with related Azure automation/integration services such as Event Grid, Azure Automation Accounts/runbooks, and Key Vault for secrets used by automation.
  • Broad working knowledge of Azure infrastructure in general (subscriptions/management groups, networking, Key Vault, storage, Log Analytics/Monitor, RBAC at the Azure resource level), beyond just the identity layer.
  • DevOps experience: CI/CD pipelines, infrastructure-as-code (e.g., Bicep, Terraform, or ARM templates), and version-controlled automation.
  • Scripting proficiency in PowerShell and/or the Microsoft Graph SDK.
  • Solid understanding of authentication/authorization protocols: SAML, OAuth2, OIDC, SCIM.
  • Demonstrated ownership/accountability for a technical domain, comfortable being the go-to escalation point and decision-maker on identity and governance matters.
  • Strong troubleshooting, documentation, and cross-team collaboration skills.

Education

  • Bachelor's or Master's degree in Computer Science, Information Technology, Software/Computer Engineering, or a related engineering discipline (or equivalent practical experience).

Nice to Have

  • Microsoft certifications such as SC-300 (Identity and Access Administrator) or SC-100 (Cybersecurity Architect).
  • Experience with hybrid identity (Entra Connect/Azure AD Connect) and on-prem Active Directory integration.
  • Familiarity with Microsoft Sentinel or other SIEM tools for identity threat detection.
  • Experience working in a regulated or enterprise SaaS environment.

What We Offer

  • The opportunity to shape and modernize enterprise identity architecture at scale.
  • A collaborative, security-focused team culture with strong engineering practices.
  • Ownership of automation and DevOps initiatives within the IAM domain.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against RELEX Solutions's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on RELEX Solutions's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    RELEX Solutions's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.