Iam Architect - Identity & Access Management

BASF SE
Madrid, Spain
7 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English, Spanish

Tech stack

Active Directory Amazon Web Services Authentication Protocols Microsoft Azure Cloud Computing Identity and Access Management Lightweight Directory Access Protocols (LDAP) OAuth Openid Connect Azure Active Directory SuccessFactors Security Assertion Markup Language (SAML)
+7 more
SAP (Applications) Systems Integration Cyberark HybridCloud Information Technology SailPoint Servicenow

Job description

Experteer Overview As IAM Architect, you will shape and implement Surventis’ global Identity u**amp; Access Management landscape.You’ll bridge security, infrastructure, and business units, coordinating with MSPs to deliver secure, scalable IAM solutions.You’ll own end-to-end IAM architecture across lifecycle processes and ensure compliant operations in a hybrid cloud environment.This role offers a hands-on, impact-focused path to advance our security posture and enable global teams.You’ll work with international colleagues and travel to sites as needed.Compensaciones / Beneficios* Define and evolve the global IAM strategy with security and infrastructure experts* Design end-to-end IAM architecture across identity lifecycle processes (Joiner-Mover-Leaver)* Act as counterpart to MSPs: steer and govern external service delivery* Ensure stable, secure, and compliant IAM operations with integration to enterprise architecture* Provide hands-on solution design, integrations, and troubleshooting* Support and advise projects and business stakeholders on IAM topicsResponsabilidades* Several years of practical IAM experience* International industrial environment experience with strong SAP footprint* Broad IAM generalist across multiple domains* Hands-on with Entra ID / Azure AD, SailPoint, CyberArk, SuccessFactors u** ServiceNow, Keeper, DigiCert* Strong expertise in Microsoft Entra ID / Azure AD and Identity Governance solutions (SailPoint, One Identity)* Authentication protocols (SAML, OAuth, OpenID Connect)* Directory services (LDAP, Active Directory)* Cloud platforms (Azure, AWS)* Experience working with and steering MSPs* Hybrid cloud and IT infrastructure understanding* Willingness to travel to Münster, Germany* Fluency in Spanish and EnglishRequisitos principales* Continuous learning and career development* Safe work environment and health promotion* Subsidized canteen on site* Free company shuttle Alcalá-Marchamalo* Competitive compensation package* Company sports groups and connectivity events (social)

Requirements

  • Several years of practical IAM experience
  • International industrial environment experience with strong SAP footprint
  • Broad IAM generalist across multiple domains
  • Hands-on with Entra ID / Azure AD, SailPoint, CyberArk, SuccessFactors u** ServiceNow, Keeper, DigiCert
  • Strong expertise in Microsoft Entra ID / Azure AD and Identity Governance solutions (SailPoint, One Identity)
  • Authentication protocols (SAML, OAuth, OpenID Connect)
  • Directory services (LDAP, Active Directory)
  • Cloud platforms (Azure, AWS)
  • Experience working with and steering MSPs
  • Hybrid cloud and IT infrastructure understanding
  • Willingness to travel to Münster, Germany
  • Fluency in Spanish and English

Benefits & conditions

  • Continuous learning and career development
  • Safe work environment and health promotion
  • Subsidized canteen on site
  • Free company shuttle Alcalá-Marchamalo
  • Competitive compensation package
  • Company sports groups and connectivity events (social)

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.buscojobs.com.es

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:49 min

Adopting OAuth best practices and removing outdated grants

Alexander Schwartz Alexander Schwartz · WWC Europe 2026

2:47 min

Exploring career opportunities and recruitment open positions

Kurt Eder · LIVE

1:34 min

Analyzing vulnerabilities in standard OAuth 2.0 authorization flows

Alexander Schwartz Alexander Schwartz · WWC Europe 2026

1:30 min

Operating developer-friendly identity infrastructure using Affinity Elements

Adam Larter Adam Larter · WWC 2024

4:13 min

Speaker background and Eurowings digital transformation context

Johannes Hansen · WWC 2023

46 sec

Brokering third-party APIs with OAuth federation

Deepu Deepu · WWC 2025

Videos

See all

Related articles

See all