Skip to content
Contractor ConsultingOpen

Enterprise IAM Architect

Original title: Enterprise IAM Architect (m/w/d) Eigenbetrieb

Confidential · remote, Germany · Remote · Senior

  • remote, Germany · Remote
  • 12 Monate
  • German

Indexed (today) · refreshed constantly

Start
November
Duration
12 Monate
Work mode
Remote
Contract
Freelance / B2B
Seniority
Senior
Reference
30718

Required skills

Nice to have:PAMPrivileged Access ManagementEmergency AccessPKIActive DirectoryKeycloakFIDO2CyberArkSailPointEJBCATenant SeparationZero TrustContext-Aware Access Control

Languages: German

Job description

Seeking an Enterprise IAM Architect to design and implement an in-house identity architecture, focusing on federation, MFA, and passwordless authentication.

Responsibilities

  • Analysis and consolidation of the existing directory, login, and authorization landscape
  • Design of an in-house identity architecture with federation, MFA, and passwordless authentication
  • Development of the platform-compliant role and authorization model, including service and automation identities
  • Integration of the identity lifecycle with HR processes, also for segregated zones
  • Piloting privileged access and emergency procedures, and creation of a risk-based scaling roadmap

Requirements

  • 6-10 years of practical experience in the IAM environment of large, heterogeneous organizations
  • Profound knowledge of directory services, federation, and IAM standards such as LDAP, SAML, OIDC, and SCIM
  • Experience with in-house MFA, passwordless authentication, and role-based identity lifecycle management
  • Practical experience with PAM, emergency access, and PKI, including in segregated environments
  • Hands-on experience with multiple IAM solutions, e.g., Active Directory, Keycloak, FIDO2, CyberArk, SailPoint, or EJBCA

Nice to have

  • Experience with tenant separation and cross-zone federation in a provider environment
  • Experience with Zero Trust and context-aware access control in segmented, in-house environments
  • Experience with the replacement of legacy authorization structures during ongoing operations

Project details

  • Start: November
  • Duration: 12 Monate
  • Location: remote, DE
  • Languages: German

Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing

Found on Contractor Consulting

  1. Job boardNew

    Cloud Solutions Architect (AWS)

    Power Media· Gliwice, Gliwice, Poland· Remote· Senior· zł 156–215 / h

    • AWS
    • Cloud Security
    • Network Configuration
    • +9

Browse all jobs
Sign up free to apply