> Markdown version of [/jobs/ext/4532109-iam-architect-identity-access-management](https://www.wearedevelopers.com/jobs/ext/4532109-iam-architect-identity-access-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Iam Architect - Identity & Access Management - **Company:** BASF SE - **Location:** Málaga, Spain - **Contract:** Permanent contract - **Skills:** Active Directory, Amazon Web Services, Authentication Protocols, Microsoft Azure, Cloud Computing, Cyber Security, Multi-Factor Authentication, Identity and Access Management, Key Management, Lightweight Directory Access Protocols (LDAP), OAuth, Password Management, Public Key Infrastructure, Openid Connect, Azure Active Directory, SuccessFactors, Security Assertion Markup Language (SAML), SAP (Applications), Single Sign-On, Systems Integration, Cyberark, HybridCloud, Information Technology, SailPoint, Servicenow - **Published:** November 3, 2026 - **Apply:** https://www.buscojobs.com.es/iam-architect-identity-access-management-m-f-d-en-malaga-ID-378494962 ## About the Role Degree in computer science, business informatics, or comparable qualification Several years of practical experience in IAM, ideally in an international industrial environment with strong SAP footprint Broad expertise as an IAM generalist across multiple domains Hands-on experience across core IAM domains, leveraging solutions such as Entra ID, SailPoint, CyberArk, SuccessFactors & ServiceNow, Keeper and DigiCert Strong expertise in: Microsoft Entra ID / Azure AD Identity Governance solutions (e.g., SailPoint, One Identity) Authentication protocols (SAML, OAuth, OpenID Connect) Directory services (LDAP, Active Directory) Cloud platforms (Azure, & AWS) Experience working with and steering Managed Service Providers Solid understanding of IT infrastructure and hybrid cloud environments Strong collaboration mindset with willingness to work closely with international teams and travel to sites esp. headquarter Münster, Germany Ability to translate business requirements into pragmatic, scalable solutions Structured, self-driven, and solution-oriented working style Strong communication skills and experience working in global teams Fluent in Spanish and English ## Description WELCOME TO BASFIn the Coatings division, we focus on developing, producing, and marketing innovative coating solutions - from applied surface technologies to automotive paints. We drive innovation, design, and new applications to meet the needs of our partners worldwide in globally connected teams. This portfolio is complemented by "Beyond Paint Solutions," enabling new surfaces and advanced materialsWHAT YOU CAN EXPECTAs an IAM Architect, you are responsible for designing, evolving, and ensuring the effective implementation of our global Identity & Access Management (IAM) landscape. You combine strategic architecture ownership with hands-on expertise, acting as the IT-Infrastructure key interface between internal teams (esp. Cybersecurity, SAP, Applications, business units) and Managed Service Providers (MSP). In cooperation with the MSP, you ensure that IAM solutions are secure, scalable, and aligned with business and compliance requirements. You will take ownership across the following IAM domains: Entra ID / Azure AD, Access Governance, SSO, MFA, PIM/PAM, Joiner-Leaver-Mover Integration, Password Management Vault, PKI & Key Management. Your key responsibilities include:Define and evolve the global IAM strategy together with security and infrastructure expertsDesign end-to-end IAM architecture across all identity lifecycle processes (Joiner-Mover-Leaver)Act as professional counterpart towards MSPs: steer and govern external service deliveryEnsure stable, secure, and compliant IAM operations as well as integration with enterprise architecture (I&O Platform, applications, cloud)Provide hands-on expertise in solution design, integrations, and complex troubleshooting scenariosSupport and advise projects and business stakeholders on IAM-related topicsWHAT YOU OFFERDegree in computer science, business informatics, or comparable qualificationSeveral years of practical experience in IAM, ideally in an international industrial environment with strong SAP footprintBroad expertise as an IAM generalist across multiple domainsHands-on experience across core IAM domains, leveraging solutions such as Entra ID, SailPoint, CyberArk, SuccessFactors & ServiceNow, Keeper and DigiCertStrong expertise in:Microsoft Entra ID / Azure ADIdentity Governance solutions (e.g., SailPoint, One Identity)Authentication protocols (SAML, OAuth, OpenID Connect)Directory services (LDAP, Active Directory)Cloud platforms (Azure, & AWS)Experience working with and steering Managed Service ProvidersSolid understanding of IT infrastructure and hybrid cloud environmentsStrong collaboration mindset with willingness to work closely with international teams and travel to sites esp. headquarter Münster, GermanyAbility to translate business requirements into pragmatic, scalable solutionsStructured, self-driven, and solution-oriented working styleStrong communication skills and experience working in global teamsFluent in Spanish and EnglishWHAT WE OFFERContinuous learning and career development through our internal job opportunities.A safe work environment where we actively promote your health and well-being.Subsidized canteen on site.Free company shuttle service between Alcalá and Marchamalo.Competitive compensation package including a fixed salary and performance-based variable pay.Opportunities to connect outside the office and stay active through company sports groups.Flexible benefits package, which can be allocated voluntarily to transportation, training, childcare, and more.Financial support for schooling and additional benefits for families.HOW TO REACH USSubmit your CV in English through the job posting so we can get to know each other. If your profile matches, our Spanish Talent Acquisition team based in Germany will contact you (phone prefix +49) and guide you through the process. With each step, you'll be closer to meeting your future team!If you have any questions about the process, feel free to contact Liliana (*******).*Please note that we will not be able to accept applications via this email address.Diversity is our greatest strength!Become a part of our winning formula for success and develop the future with us - in a global team that embraces inclusion and equal opportunities irrespective of gender, age, origin, sexual orientation, disability or belief.