Lead Security Consultant IAM / PAM (Expert) | 100% Remote

Project overview

Industry: IT Services & Consulting

For a large, heterogeneous organization, we are looking for a Lead Security Consultant for Identity & Access Management and Privileged Access Management in self-operation. 100% remote, starting immediately.

Responsibilities

Profile

Required:

Experience:

Advantageous:

Security Requirement

A security clearance is necessary for the project. It will be conducted anew for the project. Willingness is sufficient, an existing clearance is not required.

• Design and implement IAM in large, heterogeneous organizations
• Operate directory and federation services (Kerberos, LDAP, SAML, OIDC, OAuth 2.0, SCIM)
• Implement MFA independently of the manufacturer (hardware-bound, own OTP services)
• Implement PAM across heterogeneous target systems
• Design emergency access and certificate management in isolated zones
• Role models, role mining, and recertification
• Accountability for IAM in large organizations
• PAM: CyberArk, Delinea, BeyondTrust, WALLIX or Teleport
• Directory/Federation: Active Directory, FreeIPA, Keycloak, Shibboleth, ADFS
• MFA: privacyIDEA, FIDO2; Governance: midPoint, SailPoint
• PKI (EJBCA, step-ca, ADCS); CISSP advantageous
• Expert level
• German citizenship (security clearance required), residence in Germany
• Professional experience at Principal/Lead level
• CyberArk
• FreeIPA
• privacyIDEA
• SailPoint
• midPoint
• PKI

Project details

Germany / 100% Remote

Immediately

Experience Level: Principal

Security Clearance: Willingness required

up to €690/day

• Start: 2026-10
• Remote: remote
• Location: Remote, Deutschland, DE
• Languages: German