Archiviertes Projekt - 75% Remote: IAM Engineer (m/w/d)

We are currently looking for an IAM Engineer (m/w/d) for our client in the energy sector.

Start: asap
Duration: 31.12.2024 with option to extend
Capacity: 100%
Location: 75% remote, 25% Berlin
Language: English (must), German (nice to have)

Description:
We seek an experienced and passionate IAM engineer to join our international team. As an IAM Engineer
working on EDP, you will play a crucial role in crafting, implementing, and maintaining our IAM infrastructure,
focusing on ensuring secure access to services. You will be responsible for the implementation and maintenance
of our IAM solution and the technical IAM integration of the services developed on EDP. Your work is
characterized by close collaboration with our IAM architect and product owner.

Targets:
• Automate the setup and configuration of a distributed IAM solution in Kubernetes in Google Cloud
Platform using GitLab and ArgoCD and extend it to on-premise deployments.
• Integrate various tools and services using OIDC workflows and configure relevant
group/role/permission mappings based on functional and technical role concepts provided by IAM
architects via Terraform scripts.
• Contact person for other development teams to implement their solutions and requirements but
also contact person for operational issues.
• Contribute to the SAFe and Scrum process organized in regular meetings.

Requirements:
The individual must be at a mid-level in development, operations, and engineering with proven skills and
experience with
• Cloud provider IDM/IAM tools, especially AD(FS) and their integration
• Cloud and on-premise services and their configuration
• Federation/replication of directory infrastructures
• Using public clouds (GCP, Azure)
• Technical understanding of IDM (Principal, Identity, Role, Legal, and Co)

Must-have-Skills:
• At least three years of experience implementing and maintaining IAM solutions
• Bachelor in computer science or comparable education
• Proven experience with Keycloak and Hashicorp Vault
• Strong knowledge of Open ID Connect and SAML
• Experience with Kubernetes and helm charts/terraform
• Fluent English in speech and writing (min. B2)

Nice-to-have-Skills:
• Understanding of modern software/service delivery frameworks (DevOps and CI/CD, Cloud Native,
Service Oriented Architecture)
• Optional: Fluent German in speech and writing (at least B2)