IT Platform Engineer – Build ISMS & Azure AD for Health‑Tech

About the role

We are a Hamburg‑based health‑tech company developing AI‑driven clinical software. As an IT Platform Engineer you will design and implement the entire IT compliance framework from the ground up, ensuring our platform meets the highest security standards for medical AI.

Key responsibilities

• Design and implement an ISMS, including policies, controls, risk register and audit readiness for BSI C5 and ISO 27001 certification.
• Own Microsoft Entra ID / Azure AD – configure SSO, Conditional Access, MFA, identity lifecycle and licensing.
• Manage and harden the Atlassian stack (Jira, Confluence) and Git platforms (GitHub, GitLab) as well as Microsoft 365.
• Implement RBAC, SAML/OIDC/SCIM integrations and audit trails that satisfy C5, ISO 27001 and ISO 13485 requirements.
• Automate user provisioning, license allocation and policy enforcement using scripting and infrastructure‑as‑code.
• Set up monitoring, alerting and incident response processes for the internal platform.

Required profile

• Proven experience building IT compliance frameworks and achieving security certifications (BSI C5, ISO 27001, ISO 13485).
• Strong knowledge of Azure AD / Microsoft Entra ID and identity management best practices.
• Hands‑on experience with Atlassian tools, Git platforms and Microsoft 365 administration.
• Ability to write scripts and IaC (PowerShell, Bash, Terraform, ARM templates).
• Interest in health‑tech and medical AI environments.

Required skills

• Microsoft Entra ID / Azure AD
• SSO, Conditional Access, MFA
• RBAC, SAML, OIDC, SCIM
• PowerShell, Bash scripting
• Terraform or ARM templates (IaC)
• Atlassian Jira & Confluence
• GitHub & GitLab
• Microsoft 365 administration
• Azure Monitor or similar monitoring tools
• BSI C5, ISO 27001, ISO 13485 knowledge