> Markdown version of [/jobs/ext/4130514-senior-security-engineer-iam](https://www.wearedevelopers.com/jobs/ext/4130514-senior-security-engineer-iam). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Engineer IAM

- **Company:** AND-E
- **Location:** Ismaning, Germany
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Active Directory, Application Programming Interfaces (APIs), Amazon Web Services, Software System Penetration Testing, Cloud Computing, Cyber Security, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), OpenID, Windows PowerShell, Zero Trust Network Access, Security Assertion Markup Language (SAML), Security Information and Event Management, Software Vulnerability Management, Cloud Platform System, Cyberark, Mitre Att&ck, Cyber Threat Analysis, Fortinet, SailPoint, Splunk, Cisco
- **Published:** October 11, 2026
- **Apply:** https://www.adzuna.de/details/5921465293

## About the Role

* Bachelor's degree in IT Security, Cyber Security, or comparable qualification (or equivalent practical experience).
 * 5+ years in IT security engineering or operations, with significant hands-on IAM responsibility.
 * Deep expertise in Entra ID, Active Directory, MFA/passwordless, SSO protocols (SAML, OIDC, SCIM), and identity governance.
 * Strong foundation in zero-trust architecture and frameworks such as NIST, ISO 27001, or MITRE ATT&CK.
 * Working knowledge of Splunk Cloud SIEM, CyberArk, SailPoint IdentityIQ,and Cribl Stream/Edge.
 * Familiarity with AWS, Proofpoint, and Zscaler/Cisco/FortiGate.
 * Proficiency in PowerShell, Python, or Microsoft Graph API.
 * Very good English communication skills (German desirable).
 * Certifications such as Microsoft SC-300, SC-100, AZ-500, CISSP, CIDPRO, AWS Security Specialty, GIAC (GCIH, GCIA, GCFA), or Splunk/Cribl are considered a plus.

## Description

* Develop identity-centric detections and threat-hunting workflows, analyzing Entra ID logs and privilege escalation paths in alignment with the SOC.
 * Partner with Infrastructure, Client Services, and Cloud Admin teams to review and implement controls across endpoint, email, network, and cloud environments.
 * Act as internal advisor for Splunk Cloud SIEM and Cribl Stream/Edge, partnering with the MSSP on detection engineering and optimization.
 * Oversee vulnerability management and quality-assure penetration tests.
 * Serve as senior escalation point for complex SOC investigations.
 * Mentor SOC analysts and junior engineers.
 * Contribute to the long-term security roadmap.
 * Keep leadership informed on risks and developments and maintain clear architecture and process documentation.