Identity Governance & Administration Specialist

• Administration, configuration, and further development of a centralized Identity Governance and Administration platform
• Management and monitoring of the entire identity lifecycle, from onboarding through role and job changes to offboarding
• Administration of provisioning, deprovisioning, and access-rights change processes in connected target systems
• Processing and analysis of user accounts, roles, groups, permissions, and access requests
• Implementation and maintenance of role and access-rights concepts, for example based on RBAC
• Integration and support of directory services, applications, and other target systems via interfaces and connectors
• Analysis and resolution of errors in identity and access-rights processes
• Creation and maintenance of operational, process, and system documentation in accordance with established standards
• Close collaboration with business departments, Information Security, Compliance, Architecture, Operations, and application owners
• Creation of reports and analyses covering identities, accounts, roles, permissions, and governance processes

• Residence in Germany
• Submission of a current certificate of good conduct before starting employment
• Willingness to successfully complete an enhanced security clearance (SÜ2)
• Several years of professional experience administering or operating Identity Governance, Identity Management, or IAM solutions
• Practical experience with Identity Lifecycle Management, user administration, provisioning, and deprovisioning
• Strong knowledge of administering roles, groups, accounts, and permissions
• Experience with access reviews, recertifications, approval workflows, or attestation processes
• Understanding of RBAC, least privilege, and segregation of duties
• Experience with target systems, directory services, and interfaces
• Knowledge of analyzing and resolving errors in automated identity and access-rights processes
• Basic understanding of relevant IAM standards and technologies, such as LDAP, Active Directory, SAML, OAuth 2.0, or OpenID Connect
• Understanding of information security, data protection, traceability, and audit-compliant processes
• Structured, reliable, and independent approach to work
• Ability to document technical matters clearly and coordinate with both technical and business stakeholders
• Fluency in German at least at C1 level is mandatory
• Nice to have: Experience with IBM Security Verify Governance, IBM Identity Governance and Intelligence (IGI), or comparable IGA solutions
• Nice to have: Experience with Microsoft Active Directory, LDAP, or other directory services
• Nice to have: Knowledge of IGA workflows, rules, policies, and connectors
• Nice to have: Experience with relational databases, SQL, REST APIs, Java, or scripting languages
• Nice to have: Knowledge of compliance, auditing, data protection, or information security management
• Nice to have: Experience with approval workflows, self-service processes, or privileged access rights
• Nice to have: Project experience in the public sector or similarly regulated environments

• 30 days of annual leave (based on a five-day workweek)
• Flexible working hours and the option to work from home
• Active career planning, including continuous professional development
• Wide range of benefits, such as bicycle leasing, Wellpass, FINN JobAuto, hrmony Benefits, and more
• Individual salary-related benefits, such as a mobility allowance (Deutschlandticket) and meal subsidies
• Attractive employer contribution to occupational pension plans
• Social events (on-site and online)