Identity Fabric Principal

About the Company

Cronos Europa is a leading IT and digital transformation partner dedicated exclusively to European Institutions and agencies, delivering mission‑critical solutions that shape Europe’s digital future. As part of the Cronos Group, we combine deep institutional knowledge with strong engineering excellence to support high‑impact EU programmes.

Responsibilities

• Define and maintain modern authentication standards (OAuth2, OIDC, SAML) and reference architectures
• Support project teams in implementing and troubleshooting authentication flows (PKCE, Device Code, OBO)
• Design and standardize claims/attributes strategy and API access models
• Configure and operate federation integrations (IdP/SP) and Entra ID tenant-level configurations
• Design risk-based access controls using Conditional Access and MFA
• Implement and operate Entra ID Governance capabilities including access reviews and lifecycle workflows
• Develop and maintain PowerShell automation for identity operations using Microsoft Graph
• Participate in SailPoint-based IGA delivery and implement end-to-end IGA processes
• Embed GDPR/EUDPR requirements into IAM delivery

Requirements

• Bachelor or Master degree in IT
• Minimum 10 years of professional IT experience with at least 8 years in a similar role
• Deep expertise in OAuth 2.0, OpenID Connect, and SAML
• Hands-on experience with Microsoft Entra ID (formerly Azure AD) and Entra External ID
• Strong understanding of hybrid identity foundations (AD DS, AD FS)
• Practical experience with SailPoint IdentityIQ or IdentityNow
• Proficiency in PowerShell automation for Entra, M365, and AD DS
• Experience with SCIM, provisioning, and lifecycle integrations
• Knowledge of GDPR/EUDPR privacy-by-design principles
• Fluency in English (minimum B2 level)

Preferred Qualifications

• Experience with AI/agent identity governance
• Expertise in designing phishing-resistant authentication patterns
• Ability to modernize legacy AD FS environments to cloud-native patterns