Identity Governance & Administration Specialist

This is a fully remote position, open to applicants in Germany.

📋 Description

• Administration, configuration, and ongoing enhancement of a centralized Identity Governance and Administration platform.

• Management and oversight of the entire identity lifecycle, encompassing onboarding, role and job transitions, and offboarding.

• Oversight of provisioning, deprovisioning, and access-rights modification processes in linked target systems.

• Analysis and processing of user accounts, roles, groups, permissions, and access requests.

• Implementation and upkeep of role and access-rights frameworks, such as those based on RBAC.

• Integration and support of directory services, applications, and various target systems through interfaces and connectors.

• Diagnosis and rectification of issues in identity and access-rights workflows.

• Development and maintenance of operational, process, and system documentation in line with established standards.

• Close cooperation with business units, Information Security, Compliance, Architecture, Operations, and application owners.

• Generation of reports and analyses pertaining to identities, accounts, roles, permissions, and governance processes.

⛳️ Requirements

• Residence in Germany is required.

• Submission of a current certificate of good conduct prior to commencing employment.

• Willingness to successfully undergo an enhanced security clearance (SÜ2).

• Several years of professional experience in administering or operating Identity Governance, Identity Management, or IAM solutions.

• Practical experience with Identity Lifecycle Management, user administration, provisioning, and deprovisioning.

• Strong knowledge in managing roles, groups, accounts, and permissions.

• Experience with access reviews, recertifications, approval workflows, or attestation processes.

• Understanding of RBAC, least privilege, and segregation of duties principles.

• Familiarity with target systems, directory services, and interfaces.

• Knowledge in analyzing and resolving errors in automated identity and access-rights processes.

• Basic understanding of relevant IAM standards and technologies, including LDAP, Active Directory, SAML, OAuth 2.0, or OpenID Connect.

• Comprehension of information security, data protection, traceability, and audit-compliant processes.

• A structured, reliable, and independent work approach.

• Ability to clearly document technical matters and engage with both technical and business stakeholders.

• Fluency in German at a minimum of C1 level is essential.

• Nice to have: Experience with IBM Security Verify Governance, IBM Identity Governance and Intelligence (IGI), or similar IGA solutions.

• Nice to have: Experience with Microsoft Active Directory, LDAP, or other directory services.

• Nice to have: Knowledge of IGA workflows, rules, policies, and connectors.

• Nice to have: Experience with relational databases, SQL, REST APIs, Java, or scripting languages.

• Nice to have: Knowledge regarding compliance, auditing, data protection, or information security management.

• Nice to have: Experience with approval workflows, self-service processes, or privileged access rights.

• Nice to have: Project experience within the public sector or similarly regulated environments.

🏝️ Benefits

• 30 days of annual leave (based on a five-day workweek).

• Flexible working hours and the possibility to work from home.

• Active career development, including ongoing professional training.

• A comprehensive range of benefits, including bicycle leasing, Wellpass, FINN JobAuto, hrmony Benefits, and more.

• Individual salary-related benefits, such as a mobility allowance (Deutschlandticket) and meal subsidies.

• Attractive employer contributions to occupational pension plans.

• Social events (both on-site and online).