Microsoft Entra ID Engineer (Lead IAM)

Digital. Inspiring. Unique.

Tchibo is one of the ten largest eCommerce companies in Germany. We could never have attained this standing without the courage to constantly rethink the old ways. In the digital world at Tchibo, we work with the latest technologies to develop sustainable and effective solutions. Do you want to help us do this? Enrich our team with your fresh ideas!

Your tasks: You make a difference with us.

Digital. Inspiring. Unique.

Tchibo is one of the ten largest eCommerce companies in Germany. We could never have attained this standing without the courage to constantly rethink the old ways. In the digital world at Tchibo, we work with the latest technologies to develop sustainable and effective solutions. Do you want to help us do this? Enrich our team with your fresh ideas!

This position is located in Bucharest, Romania.

The team is responsible for the Tchibo datacenter operations and M365 cloud workloads. The team consists of international colleagues in Europe and Asia. Our vision is to become serverless and bring our services to the cloud where possible. The role will be responsible for the Identity and Access Management operations and process. In addition to this the role will take care about the future IAM architecture and thinking forward with our IAM technologies.

Technologies: Active Directory, Entra ID, OneIdentity, Other On-Premises IAM-Solutions, SQL Server, Windows Server, Hyper-V

General Tasks:
• Take ownership of and continuously improve our existing IAM platform, ensuring stable and reliable operations of all identity lifecycle processes (Joiner, Mover, Leaver)
• Support and collaborate closely with the existing IAM team in day-to-day operations, including monitoring of job queues, system integrations, and incident response and our daily operation shifts
• Drive the strategic evolution of our IAM Services (OneIdentity, Active Directory, Entra ID)
• Define, implement, and enforce IAM policies, access controls, and security standards across the organization
• Manage and optimize integrations between our IAM platform and connected systems (e.g., SAP, Active Directory, Entra ID, ServiceNow)
• Automate identity lifecycle processes and administrative tasks to reduce manual effort and increase reliability
• Act as a key contributor in IAM-related projects, bringing both technical depth and a structured approach to delivery
• Collaborate with stakeholders from IT Security, Infrastructure, and business departments as a trusted identity expert
• Gradually take on increased technical responsibility within the team, growing into a go-to role for architectural decisions and technical guidance
• Open to grow into a technical leadership role for the whole IAM process @Tchibo

Your profile: You keep discovering with us.

• Several years of hands-on experience in Identity & Access Management, with deep knowledge of IAM architecture and identity lifecycle processes
• Strong practical knowledge of Microsoft Entra ID and the broader Microsoft 365 ecosystem, ideally including Entra ID Governance features
• Experience with on-premise IAM solutions and familiarity with migration or modernization projects (e.g., transitioning from legacy IAM platforms to cloudnative solutions)
• Solid understanding of directory services, particularly Active Directory and its integration with cloud identity platforms
• Experience with scripting and automation (e.g., PowerShell, Graph API) to streamline IAM processes
• Proven ability to work effectively in a team environment, with strong communication skills and a collaborative mindset
• A structured, ownership-driven approach to both operations and project work
• Experience with using AI in your daily business
• Very good knowledge of English; German is an advantage

Nice to have:
• Hands-on experience with OneIdentity Manager or comparable enterprise IAM platforms
• Knowledge of identity governance standards and frameworks (e.g., RBAC, SoD, least privilege principles)
• Basic understanding of Azure services and how they interconnect with the Microsoft 365 ecosystem (e.g., Azure Functions, Azure Logic Apps, Azure Monitor)
• Entra ID Governance Know How
• KnowHow in SAP IAM Platforms

Your benefits: Together we stay different.

• Work-Life Balance: Flexible, hybrid working policy with 26 vaca>on days + your birthday off.

• Benefits: Monthly transport allowance (80 RON/month), meal tickets, and health/life insurance.

• Personal Perks: Free Tchibo coffee for home, and the chance to work on cutting-edge technology in a dynamic environment.

• Innovative Work Environment: We are a forward-thinking team where creativity and innovation are encouraged. You will collaborate with talented professionals and contribute to building Tchibo Tech, shaping the future of our technology landscape.

• Inclusive Culture: A diverse and inclusive workplace where your unique perspectives and ideas are valued, fostering a culture of collaboration and mutual respect.

• ImpacCul Work: Our meaningful projects make a real difference, driving positive change and contributing to the success of Tchibo.

Our job suits you? Then we are looking forward to your application! It's super fast: upload attachments, our motivation questions answer - done. Without a cover letter!

Please contact our recruitment department at: recruiting.tech@tchibo.ro. You have questions? Simply contact our recruiting support at +49 40 6387 3353.