Enterprise IAM Architect (m/f/d) Self-operated

Project overview

We are looking for an

Enterprise IAM Architect (m/f/d) Self-operated

Reference number: 30718

Responsibilities

• Analysis and consolidation of the existing directory, login, and authorization landscape
• Design of a self-operated identity architecture with federation, MFA, and passwordless authentication
• Development of the platform-compliant role and authorization model, including service and automation identities
• Integration of the identity lifecycle with HR processes, including for segregated zones
• Piloting of privileged access and emergency procedures, and creation of a risk-based scaling roadmap

Requirements

• 6-10 years of practical experience in the IAM environment of large, heterogeneous organizations
• Profound knowledge of directory services, federation, and IAM standards such as LDAP, SAML, OIDC, and SCIM
• Experience with self-operated MFA, passwordless authentication, and role-based identity lifecycle management
• Practical experience with PAM, emergency access, and PKI, including in segregated environments
• Hands-on experience with multiple IAM solutions, e.g., Active Directory, Keycloak, FIDO2, CyberArk, SailPoint, or EJBCA

Nice to have

• Experience with tenant separation and cross-zone federation in the provider environment
• Experience with Zero Trust and context-aware access control in segmented, self-operated environments
• Experience with the migration of legacy authorization structures during ongoing operations

Project details

November

12 months

• Start: ab sofort
• Duration: 12 Monate
• Location: DE
• Languages: German