CIAM Platform Engineer

Quick Facts

• Role: CIAM Platform Engineer (Customer Identity & Access Management)

Description

You will operate, improve, and support a Customer Identity & Access Management (CIAM) platform. You will design and implement secure authentication and authorization solutions based on OAuth2 and OpenID Connect, including user journeys for registration, authentication, authorization, and user administration. You’ll troubleshoot identity-management incidents and build backend components such as REST APIs and identity services using .NET and Microsoft technologies.

Responsibilities

• Operate, further develop, and support the CIAM platform

• Conceive and implement secure authentication and authorization solutions using modern identity standards (OAuth2, OpenID Connect)

• Design and implement user journeys for registration, authentication, authorization, and user management

• Analyze and fix incidents in identity management, authentication, and user administration

• Develop and integrate backend components, REST APIs, and identity services using .NET and Microsoft technologies

• Support DevOps operations including automated tests, CI/CD, deployment, and technical documentation

Requirements

• Completed degree in Computer Science, Business Informatics, or comparable qualification

• Multiple years of CIAM experience or a strong interest in specializing long-term

• Experience with Azure AD B2C (Custom Policies)

• Experience with Microsoft Entra External ID

• Experience with Microsoft Graph API and MSAL Library

• Strong knowledge of OAuth2 and OpenID Connect

• Knowledge of modern authorization concepts such as RBAC, PBAC/ABAC, and claims-based access control

• Knowledge of software and web development

• German and English proficiency at B2 level (spoken and written)

Benefits

• Competitive compensation according to the collective bargaining agreement for the metal and electrical industry in Baden-Württemberg, including collective special payments and a company pension plan

• Flexible working time models and mobile work

• Employee discounts, fitness and leisure offers, and on-site childcare support

• Training and development support via DriveAcademy and an e-learning platform

• Modern technology and IT equipment, on-site restaurant, parking garage with electric charging stations, and secure employment through ongoing investment