Microsoft 365 Engineer (m/f/d)

You are responsible for the operation and further development of our Microsoft-365, Azure and Microsoft Entra ID environments, in particular Exchange Online, SharePoint Online, Teams and Microsoft Entra ID. You continuously develop the On-Premises Active Directory in the hybrid identity environment. You operate and cure our PKI/ADCS environment and are responsible for topics such as certificate templates, Auto Enrollment and the certificate life cycle. You develop and implement modern security and access concepts such as RBAC, Conditional Access, MFA and Passwordless and support the implementation of Zero Trust, Least Privilege, Recertifications and De-Provisioning processes. You plan, implement and run remote desktop services including RD Gateway. You support the administration of our UEM/MDM environments (Microsoft Intune and Baramundi). You automate recurring administrative and operational tasks with PowerShell. You analyze disturbances, perform Troubleshooting and ensure targeted monitoring in the Microsoft environment. In addition to internal IT, you also enter third-party customers: service-oriented, binding in communication and structured in incident/change situations.

Multiannual practical experience in the environment of Microsoft 365 and Azure, ideally at least 3 years, better 5 years Found experience with Exchange Online, SharePoint Online, Teams and Microsoft Entra ID Multiannual experience in hybrid identity with Microsoft Entra ID / Active Directory Very good PowerShell knowledge for automation and administration Funded understanding of IAM/IGA concepts such as RBAC / ABAC, Conditional Access, MFA, Passwordless and Privileged Identity Management (PIM) Secure understanding of common authentication and federation standards such as SAML, OAuth 2.0 and OpenID Connect Found experience in operating Remote Desktop Services including RD Gateway know-how in the field of PKI / ADCS, in particular on certificate templates, Auto Enrollment, CRL / OCSP and Key Rollover; ideally complemented by experience with Certificate-Based Authentication (CBA) Experience in Endpoint Management e.g. with Microsoft Intune is advantageous Structured, independent and reliable operation and clear communication in German and English

Work-Life-Balance: Flexible working hours through trust work time, possibility for home office or mobile work as well as 30 days holiday Location & facilities: Central city location and modern office equipment Mobility: Benefits Germany Ticket and Bicycle Lease with JobRad Security: Economic stability through safe and proven business models and occupational retirement Onboarding & Learning offers: Structured integration, fixed contact persons, feedback talks, individual training through our internal learning platform Campus and external seminar offers Team spirit: Open and helpful team, group-wide networking through company and team events as well as several business sports groups Extensive sports offer: Beneficiary use of many gyms, swimming pools and other sports providers throughout Germany via the EGYM Wellpass Other benefits: Employee discounts at various online shops, as well as free organic fruit, cold and hot drinks