IAM Consultant (SSO / MFA)

Your responsibilities:

You act as an IAM consultant or Business Analyst specializing in SSO and MFA platforms like Microsoft Entra ID or Okta. You act as the bridge between business stakeholders, security teams, and 1AM engineers. You are focusing on requirement engineering, improving identity-related processes, supporting IAM transformation programs, and ensuring secure, complaint and user-friendly authentication.

• Conduct workshops with business units, security teams and application owners
• Gather, structure, and prioritize requirements for application onboarding to SSO
• Translate stakeholder needs into technical requirements (user flows, roles/groups mapping, MFA behaviour)
• Create user stories, process flows, use cases and functional specifications
• Define integration acceptance criteria and the scope of SSO readiness testing
• Coordinate with SSO/ldentity Engineering, Security, and application teams to align on solutions
• Maintain requirement traceability and support decision-making through risk/impact views
• Support validation/acceptance for releases and resolve requirement gaps during rollout
• Keeping track of standardization for operation maturity and technical improvements
• Track risks, dependencies, timelines and deliverables
• Facilitate testing, user acceptance testing and training sessions

The knowledge I own:

Must-haves

• Strong English proficiency (required) -fluent inwritten and spoken communication
• Proven experience as a Business Analyst/System Analyst (requirements, structured documentation, stakeholder communication)
• Solid understanding of SSO concepts and MFA behaviour (at integration/design level)
• Experience working with 1AM Platforms like Microsoft Entra ID or Okta in a requirements/analyst context

Nice-to-haves

• Practical familiarity with identity-driven integration topics (claims/attributes/scopes/role mapping)
• Experience with SAML/OIDC and integration patterns
• Knowledge of identity provisioning concepts (at least conceptual)
• Familiarity with identity security controls and typical SSO failure modes
• German language skills