> Markdown version of [/jobs/ext/1123214-iam-architect-identity-access-management](https://www.wearedevelopers.com/jobs/ext/1123214-iam-architect-identity-access-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IAM Architect - Identity & Access Management

- **Company:** BASF SE
- **Location:** Tinguatón, Spain
- **Contract:** Permanent contract
- **Skills:** Active Directory, Amazon Web Services, Authentication Protocols, Microsoft Azure, Cloud Computing, Cyber Security, Multi-Factor Authentication, Identity and Access Management, Key Management, Lightweight Directory Access Protocols (LDAP), OAuth, Password Management, Public Key Infrastructure, Openid Connect, Azure Active Directory, SuccessFactors, Security Assertion Markup Language (SAML), SAP (Applications), Single Sign-On, Cyberark, HybridCloud, Information Technology, SailPoint, Servicenow
- **Published:** July 2, 2026
- **Apply:** https://es.indeed.com/viewjob?jk=f5d3fadf183f4ca8

## About the Role

* Degree in computer science, business informatics, or comparable qualification
 * Several years of practical experience in IAM, ideally in an international industrial environment with strong SAP footprint
 * Broad expertise as an IAM generalist across multiple domains
 * Hands-on experience across core IAM domains, leveraging solutions such as Entra ID, SailPoint, CyberArk, SuccessFactors & ServiceNow, Keeper and DigiCert
 * Strong expertise in:
 + Microsoft Entra ID / Azure AD
 + Identity Governance solutions (e.g., SailPoint, One Identity)
 + Authentication protocols (SAML, OAuth, OpenID Connect)
 + Directory services (LDAP, Active Directory)
 + Cloud platforms (Azure, & AWS)
 * Experience working with and steering Managed Service Providers
 * Solid understanding of IT infrastructure and hybrid cloud environments
 * Strong collaboration mindset with willingness to work closely with international teams and travel to sites esp. headquarter Münster, Germany
 * Ability to translate business requirements into pragmatic, scalable solutions
 * Structured, self-driven, and solution-oriented working style
 * Strong communication skills and experience working in global teams
 * Fluent in English

## Description

As an IAM Architect, you are responsible for designing, evolving, and ensuring the effective implementation of our global Identity & Access Management (IAM) landscape. You combine strategic architecture ownership with hands-on expertise, acting as the IT-Infrastructure key interface between internal teams (esp. Cybersecurity, SAP, Applications, business units) and Managed Service Providers (MSP). In cooperation with the MSP, you ensure that IAM solutions are secure, scalable, and aligned with business and compliance requirements. You will take ownership across the following IAM domains: Entra ID / Azure AD, Access Governance, SSO, MFA, PIM/PAM, Joiner-Leaver-Mover Integration, Password Management Vault, PKI & Key Management. Your key responsibilities include:

 * Define and evolve the global IAM strategy together with security and infrastructure experts
 * Design end-to-end IAM architecture across all identity lifecycle processes (Joiner-Mover-Leaver)
 * Act as professional counterpart towards MSPs: steer and govern external service delivery
 * Ensure stable, secure, and compliant IAM operations as well as integration with enterprise architecture (I&O Platform, applications, cloud)
 * Provide hands-on expertise in solution design, integrations, and complex troubleshooting scenarios
 * Support and advise projects and business stakeholders on IAM-related topics


## Related Videos

- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Next Level Enterprise Architecture: Modular, Flexible, Scalable, Multichannel and AI-Ready?](https://www.wearedevelopers.com/videos/1017-next-level-enterprise-architecture-modular-flexible-scalable-multichannel-and-ai-ready)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)
- [Beyond Hiring: Building a Sustainable Talent Acquisition Engine at Deutsche Bahn](https://www.wearedevelopers.com/videos/1856-beyond-hiring-building-a-sustainable-talent-acquisition-engine-at-deutsche-bahn)
- [The Missing Layer Between Enterprise Data and AI Agents](https://www.wearedevelopers.com/videos/100286-the-missing-layer-between-enterprise-data-and-ai-agents)
- [Advanced Cypress: custom assertions and tasks](https://www.wearedevelopers.com/videos/790-advanced-cypress-custom-assertions-and-tasks)

## Related Articles

- [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany)
- [Finding IT & Technology English-speaking Jobs in Germany ](https://www.wearedevelopers.com/magazine/446-finding-it-technology-english-speaking-jobs-in-germany)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Finding Jobs in Germany](https://www.wearedevelopers.com/magazine/375-finding-jobs-in-germany)
- [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)