Identity & Access Management Engineer – Public & Defence Sector

This is a fully remote position, open to applicants in Germany.

📋 Description

• As a member of our engineering team, you will ensure the security and operational integrity of critical infrastructures.

• You will implement cutting-edge IAM solutions within complex cloud environments, merging top security standards with technological advancements.

• Develop and configure IAM/PAM solutions (such as Keycloak, Zitadel), encompassing role models, RBAC/ABAC, and provisioning.

• Integrate applications using OAuth2, OIDC, SAML, or SCIM, including testing and troubleshooting.

• Execute JIT/JEA concepts and uphold minimal standing privileges.

• Establish role/right workflows, attestations, and recertifications.

• Conduct technical policy implementations employing Terraform, OPA, or similar tools.

• Embed IAM into build and deployment pipelines (such as GitLab CI/CD, Jenkins).

• Connect cloud services and container platforms (like Kubernetes) to centralized identity services.

• Technically transition existing AD/IAM structures to modern cloud or private-cloud environments.

• Analyze authentication flows, conduct security hardening, and guarantee auditability.

⛳️ Requirements

• Initial experience in IAM: practical experience with IAM solutions (Keycloak, Zitadel, or similar identity platforms).

• Familiarity with PAM and secret management solutions (such as Teleport & HashiCorp Vault) and a consistent application of principles like Least Privilege and Zero Trust.

• Practical experience in modern cloud environments (e.g., Google Cloud) and working with APIs.

• Proficient use of CI/CD and IaC tools such as GitLab CI/CD, Jenkins, Terraform, or Ansible.

• Knowledge of Kubernetes or similar platform technologies.

• Experience in agile methodologies (such as Scrum, Kanban) and working within interdisciplinary teams.

• Structured work approach and effective communication skills with technical teams and management levels.

• Proficient in German: both spoken and written, particularly for documentation and coordination in a government/defense context.

🏝️ Benefits

• Premium equipment: the latest MacBooks or Windows Surfaces, iPhone or Pixel, including an unlimited mobile contract for personal use.

• Modern software stack: ChatGPT, Personio, HubSpot.

• Additional perks: a company credit card along with an expense tool and an Edenred City card (€50 monthly).

• Flexible working arrangements: 30 days of vacation plus trust-based working hours (“Come as you are”).

• Options for remote work and contemporary offices located in Münster, Cologne, and Leverkusen.

• Opportunities for professional certifications, as well as leadership and soft-skill training, alongside access to platforms like LinkedIn Learning or Udemy.

• Customized development paths, such as moving towards Lead Architect or Practice Lead.