IAM Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an IAM Engineer based in Germany.

This role offers the opportunity to strengthen enterprise security through identity governance, access management, and Zero Trust initiatives.

You will design and maintain secure identity solutions that protect critical systems and sensitive data.

The position combines technical expertise, security strategy, compliance support, and cross-functional collaboration.

You will work with modern IAM platforms, cloud security tools, and enterprise security frameworks to improve access controls.

Your contributions will directly support risk reduction, regulatory readiness, and secure digital operations.

This is an ideal opportunity for an experienced security professional passionate about identity, automation, and cybersecurity excellence.

Accountabilities

As an IAM Engineer, you will lead identity and access management initiatives, ensuring secure, compliant, and efficient access across enterprise environments.

You will help establish strong governance practices, implement security controls, and support the organization’s broader cybersecurity strategy.

• Lead and maintain IAM governance frameworks aligned with security best practices and regulatory requirements.
• Design, implement, and manage identity governance solutions using Sail Point Identity Security Cloud/Identity IQ as the primary IAM platform and Okta as a secondary platform.
• Enforce least-privilege access models, role-based access controls, and secure access policies across users, services, and privileged accounts.
• Manage access lifecycle processes, including joiner, mover, and leaver workflows.
• Lead quarterly access reviews, access certifications, and remediation of access exceptions.
• Design and maintain secrets management solutions, including secure storage, credential rotation, and lifecycle management for sensitive information.
• Support engineering teams with secure secrets handling practices and integration patterns.
• Validate patch compliance, identify security gaps, and coordinate remediation activities based on risk priorities.
• Define and enforce encryption standards for data protection across cloud and enterprise systems.
• Support key management practices and secure communication protocols.
• Promote Zero Trust security principles through identity-centric access controls and continuous verification practices.
• Prepare compliance documentation, audit evidence, and security reports while partnering with governance and audit teams.

Requirements

The ideal candidate is an experienced security professional with strong expertise in identity management, access governance, and enterprise security controls.

You should have hands-on experience with IAM platforms, cloud environments, and security compliance practices, combined with strong communication and documentation skills.

• 5+ years of experience in Security Engineering, IAM, Identity Governance, or related cybersecurity roles.
• Strong hands-on experience with Sail Point Identity Security Cloud/Identity IQ and Okta administration.
• Deep understanding of IAM concepts, including RBAC, ABAC, least-privilege models, and privileged access management.
• Experience implementing and managing secrets management solutions such as AWS Secrets Manager or equivalent platforms.
• Proven ability to validate patch compliance, manage security SLAs, and support remediation processes.
• Strong knowledge of encryption standards, secure communication protocols, and data protection controls.
• Experience supporting Zero Trust architectures and identity-driven security models.
• Familiarity with cloud platforms such as AWS, Azure, or GCP.
• Exposure to compliance frameworks including ISO 27001, SOC 2, PCI-DSS, or NIST.
• Experience working in large-scale or regulated enterprise environments is preferred.
• Excellent documentation, communication, and stakeholder management skills.

Benefits

• Fully remote work environment with flexibility to work from your preferred location.
• Opportunity to work on enterprise-level cybersecurity and identity management initiatives.
• Exposure to modern IAM platforms, cloud security technologies, and Zero Trust frameworks.
• Opportunity to contribute to security improvements that protect critical business systems.
• Collaborative environment with cross-functional teams across technology and security domains.
• Professional growth opportunities through challenging security projects and continuous learning.
• Competitive compensation package based on experience, skills, and market conditions.

How Jobgether works

We use an

AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements.

Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company.

The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice

By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer.

This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR).

You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information.

These tools assist our recruitment team but do not replace human judgment.

Final hiring decisions are ultimately made by humans.

If you would like more information about how your data is processed, please contact us.