Senior Cloud DevOps Engineer – Microsoft Entra ID & IAM Automation (contract)

Project overview

Start Date: Mid-November 2026

Industry: Bank / Financial Sector

Responsibilities

• Develop automation solutions for Entra ID (Terraform, Go APIs, App Registrations, Enterprise Apps, Conditional Access, Administrative Units).
• Develop and maintain authentication and authorization flows with OAuth, SAML, and OpenID Connect for SSO.
• Develop conceptual specifications for OAuth2 and SAML flows and implement them in the applications.
• Create and optimize auth rules, including automated tests and monitoring; manage Azure and M365 services in the IAM and security area.
• Harden Entra ID and further develop the configuration monitoring framework.
• Documentation, training of internal teams, and integration of new Azure base services.

Requirements

Advantageous (Evaluation Relevant):

IMPORTANT:

Languages

Languages Spoken Written Priority

English Good Good A Must

German Very Good Very Good A Must

Description Priority

DevOps Engineer A Must

Kind regards / Best Regards

André van Sprundel

CEO

GHR Global Human Resources AG

Blegistrasse 13

CH-6340 Baar / ZG

Direct Line: *

Email: *@*.ch

Web: www.ghrgroup.ch

• Entra ID (Exclusion Criterion) -> profound knowledge of Microsoft Entra ID, specifically Conditional Access, Identity Protection, and Application Proxy.
• IAM Depth (Client Requirement) -> Network security, OAuth, SAML, OpenID Connect, and IAM standards – to the extent that flows can be conceptualized independently. Pure infrastructure or Azure generalists do not cover the role.
• DevOps Tools (Exclusion Criterion) -> CI/CD, GitLab, Terraform, and Go, Python, or Bash.
• Cloud (Exclusion Criterion) -> several years of practical experience with Microsoft Azure, ideally also M365; very good knowledge of Azure base services and cloud security.
• Infrastructure as Code -> profound knowledge with Terraform.
• Methodology -> Agile development with Scrum and SAFe.
• Education -> Computer science at FH or university level or equivalent education.
• Knowledge Transfer -> Documentation and training of internal teams are part of the assignment.
• Work Style -> Analytical, quality and security conscious, structured, and self-reliant.
• Languages -> German C1 and English B2.
• Hardening of Entra ID according to current recommendations and configuration monitoring.
• Identity Governance and Administrative Units in large tenants.
• Regulated financial environment with proof and logging obligations.
• Remote Policy -> On-site at the client 100% / Home Office 0%, depending on the project phase; remote work only allowed within Switzerland (internal regulations / banking secrecy).
• Extracts from the debt enforcement and criminal record registers will be requested (residence Germany: SCHUFA report and police clearance certificate).
• Residence in Switzerland or valid residence permit at the time of offer submission.
• ZEK information.

Project details

12 months with option

Possible Contract Types: Consultant / Rental

100%

Number of Positions: 1

Deadline: 04.11.2026, 22:00

Zurich

Creation Date: 02.11.2026

Description

For our end client in the Swiss banking and financial sector, we are looking for a Senior Cloud DevOps Engineer with a focus on Identity & Access Management as follows:

Background & Mandate:

The team designs and operates the end client's Azure base services. The focus is on optimizing and automating Microsoft Entra ID – App Registrations, Enterprise Apps, Conditional Access, and Administrative Units as Infrastructure as Code with Terraform and APIs in Go – as well as SSO flows with OAuth, SAML, and OpenID Connect, hardening Entra ID, and a monitoring framework for the configuration.

Important for selection: Not an Azure generalist, but real IAM depth. Pure infrastructure profiles are not suitable – the OAuth2 and SAML flows must be conceptualized independently. Documentation and training of internal teams are part of the assignment.

• Start: 2026-11
• Duration: 12 Monate
• Remote: onsite
• Location: Zürich, Schweiz, CH
• Languages: German