Senior Microsoft Identity Consultant, Architect

• Advise on and design complex projects for enterprise clients
• Take responsibility for architecture, implementation, and presentation of results, depending on experience level
• Assess on-premises and cloud-based Microsoft Entra ID and AD DS environments
• Develop Zero Trust-compliant protection and detection concepts
• Lead teams and facilitate workshops
• Create robust concepts and decision papers
• Present results to C-level stakeholders
• Design and implement solutions in AD DS and Microsoft Entra ID, including Conditional Access, MFA, and hybrid synchronization
• Develop roadmaps through to solution handover
• Establish security and governance standards, including monitoring, detection, and best-practice patterns

• In-depth knowledge of the Microsoft Identity platform, including roles, delegation, authentication/authorization, MFA, LDAP, Kerberos, NTLM, OAuth 2.0, OIDC, and SAML
• Experience with pass-the-hash, Golden Ticket, Kerberoasting, and protocol attacks against OIDC/SAML, as well as detection and mitigation
• Practical experience with tiering/Enterprise Access Model (EAM) and privileged access strategies, such as PAW and JIT/JEA
• Proven experience designing and implementing AD DS, AD CS, Entra ID Connect, and Microsoft Entra ID
• Experience producing high-quality architecture and operations documentation
• Ability to structure workshops, guide decision-making clearly, and build strong client relationships
• Professional demeanor, strong communication skills, and confidence presenting complex topics
• Analytical mindset
• Willingness to collaborate with clients as part of small or large Avanade teams
• Fluent German and English, minimum C1 level
• Willingness to travel by agreement

• Performance-based, competitive compensation and a benefits package above the statutory minimum
• Exceptional opportunities for professional development and training
• At least 80 hours of training per year
• Paid certifications
• Challenging projects for renowned international companies
• Work on complex M&A, consolidation, and transformation projects
• A team of experienced Identity, Security, and Cloud specialists with significant opportunities to shape solutions
• A dedicated People Lead to support your career growth
• Flexible working models and remote work
• Unlimited learning opportunities and ambitious growth prospects
• Diverse and inclusive culture