IAM Architect (m/w/d)
A-SAP
Ansprechpartner: Nasar Rehman
frankfurt, Deutschland
VersicherungenMicrosoft Forefront Identity ManagerIdentitätsmanagementLDAPPluggable Authentication Module (PAM)SamlOracle Access ManagerCustomer Identity Access ManagementOracle Identity Manager
Beschreibung
About the role
We are looking for an IAM Architect to define and lead the strategy, architecture and roadmap for Identity and Access Management across our organisation. You will shape how employees, partners, customers and machines securely access our systems, both on-premises and in the cloud. You will be the go-to expert for identity across security, IT, development and compliance teams.
Your responsibilities- Define the IAM target architecture and roadmap, covering identity governance (IGA), access management (AM), privileged access management (PAM) and customer identity (CIAM)
- Design secure, scalable solutions for authentication, authorisation, SSO, MFA and federation across on-premises, hybrid and multi-cloud environments
- Lead the design of identity lifecycle processes (joiner-mover-leaver), provisioning, role models and access certification
- Drive the move toward Zero Trust, passwordless authentication and modern identity standards
- Define standards for machine and workload identities: service accounts, API security, secrets management and non-human identities
- Evaluate, select and integrate IAM products and vendors
- Make sure IAM controls meet regulatory requirements such as DORA, BAIT, NIS2, ISO 27001 and GDPR, and support internal and external audits
- Work with application and cloud teams to embed identity into new systems and CI/CD pipelines
- Produce architecture documents, design patterns and guidelines, and review solution designs
- Mentor engineers and advise senior management on identity risks and investment priorities
- 7+ years in IT security, including at least 4 years in IAM architecture or engineering
- Hands-on experience with several IAM platforms, for example:
- IGA: SailPoint, Saviynt, One Identity Manager, Omada
- Access management: Microsoft Entra ID, Okta, Ping Identity, ForgeRock, Keycloak
- PAM: CyberArk, BeyondTrust, Delinea
- Deep knowledge of SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP and Kerberos
- Strong understanding of Active Directory and Entra ID, and of identity in AWS, Azure or GCP
- Knowledge of RBAC, ABAC, SoD, least privilege and Zero Trust principles
- Experience in regulated industries, ideally banking, insurance or financial services
- The ability to turn business and regulatory requirements into clear architecture decisions
- Excellent communication and stakeholder management skills
- Fluent English; German is a strong advantage
- Certifications such as CISSP, CISM, TOGAF, or vendor-specific IAM certifications are a plus
- Competitive salary plus annual bonus
- Hybrid working with a flexible schedule
- 30 days of annual leave
- A generous training and certification budget
- Company pension scheme
- Deutschlandticket or a mobility allowance
- A modern office in central Frankfurt with good public transport connections
- A key role in shaping the organisation's security strategy