Cloud Engineer

Job title: Cloud Identity Engineer

Languages: English

Location: Brussels, Belgium

Contract Duration: Up to 31/12/2025

Job Description

• Are you a Cloud Identity Engineer with a strong focus on security and user experience? Then we have a challenging migration project for you. We are looking for a specialist who replaces an existing, internally managed identity solution with a modern, cloud-based solution with Microsoft Entra External ID.
• This is a temporary project with a clear scope: the assignment starts as soon as possible (preferably before Q4) and lasts a maximum of two quarters. You bring expertise, carry out the migration, and secure best practices so that the platform is ready for the future.
• Currently, end users log in via an app with a username and password. Authentication is handled by an internal identity provider, which is managed entirely on-premise. This solution is no longer future-proof and will be replaced by a cloud-native alternative with Microsoft Entra External ID.
• You will work in an existing Azure environment where Bicep is already used for infrastructure management, and you will regularly interact with development teams that mainly develop in .NET. There is no expectation that you will actively write code, but basic knowledge of development workflows is important to be able to collaborate smoothly.

Roles and Responsibilities:

• Lead the migration from an on-prem identity provider to Microsoft Entra External ID.
• Set up secure and user-friendly login methods for app users.
• Implement secure credential management with Azure Key Vault.
• Integrate identity and access into Azure DevOps (CI/CD) pipelines.
• Define and roll out IAM best practices.
• Advising on access management, rights structures and authentication flows.
• Knowledge sharing with internal teams to make the solution transferable.

What you bring

• Experience with identity providers (required): You have worked on setting up or migrating such systems.
• Microsoft Entra External ID (must-have): you know how to use it securely and scalably.
• Modern identity protocols (OAuth 2.0, OpenID Connect, SAML): good knowledge of authentication and authorization mechanisms.
• Azure Key Vault: Experience securely managing credentials and secrets.
• CI/CD integration (Azure DevOps): You have experience embedding security in the release process.
• Basic knowledge of development (must-have): you understand the workflows of developers and think along from their perspective.
• Nice-to-have (NET) knowledge: Affinity with .NET helps you to switch faster with devteams.
• Bicep or IaC experience (bonus): knowledge of infrastructure-as-code is a bonus, but not a hard requirement.

Personal qualities

• Independent and result-oriented: you know what is needed and deliver within clear frameworks.
• Strong communication skills: you translate complex technical choices into clear steps and advice.
• Collaborative – you can easily switch between dev teams, security and operations.
• Security-minded: you always think in terms of risks, privacy and protection of end users.

Specific Skills

• Knowledge of authentication protocols (OAuth 2.0, OpenID Connect, SAML)
• Experience with Azure Key Vault
• Understanding of CI/CD integration workflows using tools like Azure DevOps
• Familiarity with identity providers (e.g., Azure AD, Okta, Auth0)
• Knowledge of Microsoft Entra External ID or similar identity management services
• Understanding of software development workflows, including version control, build pipelines, and deployment strategies