About the role

IAM System Engineer managing authentication services in a critical ICT infrastructure team. Engaging in project work and cross-functional collaboration to enhance security and identity management.

Responsibilities

Plan, build and operate on-premises platforms with a focus on directory services, federated authentication, public key infrastructure (PKI) and identity & access management (IAM)
Configure, optimize and integrate these services across the ICT landscape – including network access control, multi-factor authentication and business-critical applications
Provide subject-matter input to the overall ICT architecture as a specialist for authentication services and their interfaces to adjacent systems
Take platform ownership for all authentication services across the entire ICT infrastructure
Develop and standardize the authentication services for high availability, data security and integrity – with a clear focus on automation
Operate the authentication platforms actively and provide hands-on support to the team in day-to-day ICT infrastructure operations
Work closely in an interdisciplinary way with specialists from networking, virtualization and server infrastructure
Carry out in-depth fault analyses, performance diagnostics and capacity planning for the systems under responsibility
Create and maintain system documentation and ensure compliance with internal policies and regulatory requirements

Completed training in computer science or a comparable technical qualification with solid, several years of practical experience in Identity & Access Management
Proven experience in planning, implementing and operating Active Directory, IAM solutions and PKI infrastructures
Strong foundational knowledge in IT infrastructure topics such as compute, storage, server and client virtualization, as well as application operations
Strong security awareness when designing and operating IT platforms in regulated and highly available environments
Experience with standardization and automation as the basis for cost-efficient and reliable platform operations
Intrinsic motivation to specialize and develop professionally in a security-critical environment over the long term
Independent, structured and analytical way of working with a high degree of personal responsibility
Strong written and verbal communication skills – both within the team and towards business units
Very good German language skills (spoken and written) and good English skills
Willingness to perform maintenance and on-call duties, a clean criminal record (no convictions) and a Category B driver's license are required

Flexible working hours with the option to work up to 50% remotely
Above-average social benefits: generous pension contributions, 100% continued salary payment in case of illness or accident, and access to mental health services
Attractive family benefits, including generous parental leave arrangements and a childcare subsidy
A collegial, diverse team with an open communication culture that tackles demanding technical challenges together