Consultant IAM/PAM (Identity, Authorization and Privileged Access Management)

Project overview

For our client, we are looking for a consultant and implementer for Identity, Authorization, and Privileged Access Management (m/f/d)

Our client plans the conception and independent implementation of an Identity, Authorization, and Privileged Access Management as part of a pilot. The solution will be realized in a self-operated environment without dependence on vendor services. This includes directory and federation services, MFA, PAM, its own certificate management, and role and authorization models. The environment is highly isolated and includes segregated zones with their own time synchronization. Collaboration is location-independent.

Responsibilities

• Conception and independent implementation of an Identity, Authorization, and Privileged Access Management in the pilot for a self-operated environment without dependence on vendor services
• Design and introduction of identity and authorization management in large, heterogeneous organizations with responsibility for results
• Operation of directory and federation services in self-operation (Kerberos, LDAP, SAML, OIDC, OAuth 2.0, SCIM)
• MFA without vendor dependency (hardware-bound or self-operated OTP services) incl. token lifecycle
• Privileged Access Management across heterogeneous target systems in self-operation incl. emergency access procedures without remote access and without vendor support
• Own certificate management incl. revocation information and time synchronization in segregated zones
• Development of role and authorization models incl. role mining, authorization management, and recertification
• Handling of personal, technical, and machine identities incl. automated provisioning
• Integration with HR processes and coordination with co-determination regulations

Requirements

Very good German language skills in speaking and writing are required.

Application:

We look forward to receiving your application with your current CV (in German) and your hourly rate.

For questions, please contact Freelancermap or *@*.io.

Your QUINCEY Team

• 6-10 years of experience in identity and authorization management in large, heterogeneous organizations
• Directory and federation services in self-operation: Kerberos, LDAP, SAML, OIDC, OAuth 2.0, SCIM
• MFA without vendor dependency incl. token lifecycle
• Privileged Access Management across heterogeneous target systems in self-operation
• Own certificate management incl. revocation information (PKI)
• Role and authorization models incl. role mining and recertification
• Personal, technical, and machine identities incl. automated provisioning
• Integration with HR processes and co-determination regulations
• Practical experience with Keycloak
• Practical experience with PAM tools (CyberArk, Delinea, BeyondTrust, WALLIX, Teleport)
• Practical experience with IGA tools (midPoint, SailPoint, One Identity, Omada)
• Practical experience with AD, FreeIPA, UCS, Shibboleth, ADFS
• Practical experience with privacyIDEA, LinOTP, FIDO2/WebAuthn
• Practical experience with EJBCA, Dogtag, step-ca, ADCS, cert-manager
• Practical experience with HashiCorp Boundary
• Practical experience with SPIFFE/SPIRE

Project details

by arrangement

31.12.2027 (with option for extension)

Format: 100% Remote

• Start: ab sofort
• Duration: 12 Monate
• Remote: remote
• Location: NRW, Deutschland, DE
• Languages: German