Identity & Access Management (IAM) Engineer

We are looking for an experienced Identity & Access Management (IAM) Engineer to join a complex and highly regulated enterprise environment. In this role, you will be responsible for designing and implementing identity and access management solutions while ensuring compliance with security, governance, and audit requirements.

A key responsibility is the design and maintenance of an enterprise authorization model, with a strong focus on the separation of privileged and standard user accounts based on an established tiering concept. Key responsibilities

Design, implement, and maintain Identity & Access Management (IAM) solutions.

Develop and maintain enterprise authorization and permission models.

Ensure the proper separation of privileged and standard accounts in accordance with the organization's tiering strategy.

Manage identities, groups, roles, and permissions across Active Directory, Microsoft Entra ID, and SaaS applications.

Configure and administer Azure Role-Based Access Control (RBAC), including:

Role Definitions

Scopes

Permission Inheritance

Custom Roles

Process and implement access requests received through ServiceNow while communicating with stakeholders to clarify business requirements when necessary.

Develop and maintain PowerShell automation scripts for identity and access management tasks.

Work with Microsoft Graph, Az PowerShell modules, and related Microsoft technologies to automate administrative processes.

Ensure all IAM activities comply with internal security policies, compliance standards, and audit requirements

Strong technical knowledge of

Active Directory

Microsoft Entra ID

Identity and access management for SaaS applications

Solid understanding of Azure RBAC concepts and administration.

Experience with PowerShell scripting, including Microsoft Graph and Az PowerShell modules.

Good understanding of privileged access management and account tiering concepts.

Strong analytical and problem-solving skills.

Good communication skills in German, as the role involves working with ServiceNow tickets and interacting with requestors to clarify access requirements.

Experience working in regulated enterprise environments is considered an advantage.

Working conditions

Availability during the service window from Tuesday to Friday, 08:00–12:00 (remote presence preferred during these hours).

Full-time assignment (40 hours per week).

Originally posted on Himalayas