Identity Management Engineer

The Identity Management Engineer is responsible for designing, developing, and operating the B. Braun Customer Identity and Access Management (CIAM) platform. The role focuses on building secure backend services and authorization models using One Identity Manager. This includes implementing identity lifecycle processes, integration with custom APIs, and ensuring compliance with security, governance, and regulatory requirements.

Duties and Responsibilities

• Develop and maintain the Identity Management Platform based on One Identity Manager.
• Design and implement scalable backend services for customer administration and identity lifecycle processes (Joiner, Mover, Leaver).
• Build secure, high-performance service layers and processes.
• Ensure modular, maintainable, and extensible application design.
• Contribute to CIAM strategy and roadmap, and architecture design and evolution.
• Collaborate in defining authorization and identity standards and secure, scalable system design.
• Implement and extend One Identity Manager capabilities.
• Develop custom synchronization solutions using REST APIs.
• Implement data mapping, transformation, and consistency checks.
• Ensure reliable data exchange and synchronization across systems.
• Implement logic for license assignment and tracking.
• Implement and support threat modeling and risk assessments.
• Ensure compliance with DPIA (Data Protection Impact Assessment), data retention policies, and DSR (Data Subject Rights).
• Enforce secure coding and identity security best practices.
• Provide 2nd/3rd-level support for CIAM services and applications.
• Monitor system performance, troubleshoot issues, and ensure high availability and reliability of identity services.

Required Qualifications

Must-have

• Hands-on experience with One Identity Manager or similar.
• Strong understanding of Identity & Access Management (IAM/CIAM) concepts, access governance, and identity lifecycle management processes.
• Familiarity with VB.Net, PowerShell, and Angular.
• Solid understanding of authorization models, especially ReBAC, and OpenFGA or similar fine-grained authorization systems.
• Experience with integration and synchronization between systems, database design and handling identity data, and designing and building processes.

Nice-to-have

• Experience with Azure cloud services and event-driven architecture.
• Understanding of GDPR and data privacy regulations, CI/CD pipelines, and DevOps practices.
• Familiarity with EMS systems or contract management platforms.
• Backend development skills, such as C#, .NET, or Java.
• Experience with REST API development and authentication protocols including OAuth2 and OpenID Connect.

Personal Skills

• Strong analytical and conceptual thinking.
• High security and quality awareness.
• Ability to work in complex, regulated environments.
• Strong ownership and proactive mindset.
• Good communication skills with technical and business stakeholders.

Benefits

• Additional social funds for summer holidays and Christmas.
• Co-funding of a Multisport card and private medical care.
• Opportunity to join group life insurance.
• Funding for trainings and conferences.
• Co-funding of professional development.
• Free language lessons and access to an e-learning platform.
• Team-building and sports events.