One Identity Manager Architect (m/w/d)
A-SAP
Ansprechpartner: Nasar Rehman
frankfurt, Deutschland
FinanzenActive DirectoryMicrosoft Forefront Identity ManagerIdentitätsmanagementIdentity-Management-SystemeLDAPRole Based Access ControlSAP MDMLifecycle ManagementOracle Access ManagerCustomer Identity Access ManagementOracle Identity Manager
Beschreibung
About the role
We are looking for an experienced One Identity Manager Architect to design, lead and evolve our Identity and Access Management (IAM) platform. You will own the target architecture of our One Identity Manager environment and turn business and regulatory requirements into secure, scalable identity solutions. You will work closely with security, IT operations, HR, application owners and audit teams.
Your responsibilities- Design and own the end-to-end architecture of the One Identity Manager platform, including the data model, synchronisation, workflows and role model
- Lead the integration of target systems such as Active Directory, Entra ID (Azure AD), SAP, LDAP, databases and cloud applications through connectors and the Synchronization Editor
- Define and implement identity lifecycle processes: joiner-mover-leaver, provisioning and deprovisioning, and self-service requests through the IT Shop
- Design and optimise role-based access control (RBAC), business roles and segregation-of-duties (SoD) rules
- Drive access certification / attestation campaigns and compliance reporting
- Make sure the platform meets regulatory requirements such as BAIT/DORA, ISO 27001, GDPR and NIS2
- Set technical standards, review customisations (scripts, processes, Web Designer / Angular web portal) and guide developers and engineers
- Plan upgrades, performance tuning, high availability and disaster recovery for the IAM landscape
- Act as the main technical advisor to stakeholders, auditors and senior management
- Assess and integrate related technologies such as PAM, SSO/federation and cloud identity services
- 5+ years of experience in IAM, including at least 3 years hands-on with One Identity Manager (version 8.x/9.x or later)
- Strong knowledge of the One Identity Manager data model, Designer, Manager, Synchronization Editor, Job Service and web portal
- Experience with VB.NET/C# scripting, SQL Server and PowerShell
- Solid understanding of IAM concepts: RBAC, ABAC, SoD, attestation and lifecycle management
- Experience integrating Active Directory, Entra ID and SAP; knowledge of SCIM, SAML, OAuth 2.0 and OpenID Connect is a plus
- Experience in regulated industries, ideally banking, insurance or financial services
- Strong communication skills and the ability to explain complex concepts to non-technical stakeholders
- Fluent English; German is a strong advantage
- Certifications such as One Identity Manager training, CISSP or CISM are a plus
- Competitive salary plus annual bonus
- Hybrid working with a flexible schedule
- 30 days of annual leave
- A budget for training and certifications
- Company pension scheme
- Deutschlandticket or a mobility allowance
- A modern office in central Frankfurt with good public transport connections
- The chance to shape the identity strategy of a growing organisation