IAM Engineer (SSO/MFA Specialist)- L3

Your responsibilities:

You design, implement, and operate a state-of-the-art Identity Provider platform like Microsoft Entra ID, Okta, etc.). You are involved in business projects and enable secure and reliable authentication flows for business applications, with a strong focus on SSO and MFA with high priority on stability.

• Manage Single Sign-On integrations using SAML 2.0, OAuth, OIDC etc.
• Configure and maintain MFA and related identity security policies
• Support onboarding of new applications into SSO (technical integration, troubleshooting, rollout execution)
• Support/ Steer L3-level incident/problem diagnosis for identity/authentication issues
• Collaborate with application teams, engineers, and operations to resolve root causes and improve reliability
• Document technical setups, integration patterns, and changes

The knowledge I own:

Must have

• Strong English proficiency (required) -fluent inwritten and spoken communication
• Strong hands-on experience with 1AM platforms such as Okta or Microsoft Entra ID in an SSO context
• Knowledge of SSO concepts and integration fundamentals (identity flows, claims/attributes, certificates/metadata, redirects, Conditional Access/Authentication Policies)
• Solid baseline knowledge of Active Directory
• Experience with MFA configuration and security consideration

Nice-to-haves

• Experience with Entra ID application security concepts (Enterprise Apps, permissions, configuration)
• Automation/scripting experience (e.g., PowerShell, Python, or similar)
• Security mindset (threat awareness, failure modes, least privilege)
• German language skills