IAM Engineer

3D-ICT; Antwerpen; Sur place; EUR 85 000 - 110 000; Plein temps

Résumé du poste

3D-ICT zoekt een senior IAM engineer met sterke .NET- en Azure-ervaring voor het versterken van de backend van ons identity orchestration platform. Je leidt IAM-initiatieven, implementeert governance, provisioning en fijnmazige autorisatie en werkt mee aan een cloud-native Azure-architectuur.

De rol vereist hands‑on ervaring met Keycloak/Entra ID, SCIM, OIDC, OAuth 2.1 en moderne IAM-standaarden, plus sterke communicatieve vaardigheden in een internationaal team.

Qualifications

• Senior IAM engineer met bewezen, relevante ervaring en zelfstandigheid in een complexe IAM-omgeving.
• Ervaring met .NET back-end / back-office ontwikkeling.
• Sterke planningsvaardigheden en resultaatgerichte aanpak.
• Klant- en teamgericht, communicatief en initiatiefrijk.
• Veiligheidsbewust en hands-on mentaliteit.

Responsabilités

• Ondersteunen en verder ontwikkelen van het interne identity orchestration platform.
• Beoefenen van cloud-native migratie van .NET-componenten naar Azure.
• Ontwerpen en bouwen van Azure-based IAM-functionaliteit (Functions, Container Apps, Key Vault).
• Ondersteunen van IAM-gerelateerde onderwerpen zoals provisioning, API-beveiliging en IGA-wijzigingen.
• Beheren van IAM-incidenten en vuln. management.
• Bijdragen aan IAM-architectuur en beleidsgebaseerde autorisatie.
• Ontwerpen van identity lifecycle management en user provisioning (SCIM).
• Implementeren van fine-grained authorization met OPA/OpenFGA/AuthZen en RBAC/ABAC/ReBAC/PBAC.

Description du poste

Functie

ROLE CONTEXT

• We are looking for a senior IAM Engineer with strong .NET and Azure experience to
• strengthen the team responsible for the backend of our in-house identity orchestration platform. The profile must bring proven IAM expertise and be able to guide the implementation of identity governance, provisioning and fine-grained authorization solutions.
• In this role you maintain and further develop existing .NET components while driving the move to a modern, cloud-native architecture on Azure. You contribute to IAM-related evolutions, API security and new Azure-based modules.

DESCRIPTION AND TASKS

• You support and further develop the in-house identity orchestration platform and take ownership of related analysis, development, maintenance and follow-up.
• You help move existing .NET components toward a cloud-native target architecture on Azure by understanding the current stack, identifying reusable components, and translating functional needs into maintainable cloud-ready solutions.
• You design and build new Azure-based IAM functionality from scratch, using components such as Azure Functions, Azure Container Apps and Azure Key Vault, and integrate it with REST services and identity providers.
• You support IAM-related development topics such as user provisioning, API security, token conversion with user context, and identity governance (IGA) changes.
• You follow up IAM-related incidents and support vulnerability management for the components you own.
• You apply IAM and security engineering expertise to support secure user management, access control and API integration.
• You provide senior-level input on IAM architecture topics and support the implementation of the agreed architecture, including the detailed design and delivery of IAM solutions such as policy-based authorization.
• You design and implement identity lifecycle management and user provisioning solutions, including integrations with identity providers and SCIM-based flows.
• You design and implement fine-grained authorization using policy engines and standards such as OPA, OpenFGA or AuthZen, and apply appropriate authorization models including RBAC, ABAC, ReBAC and PBAC.
• Maintain & implement solutions within the agreed timeline and quality standards.
• Document implementations and changes.
• Support analysts & designers in converting functional specifications into technical solutions.
• Deliver 3rd-line support.
• You follow technical evolutions and can independently conduct research with the support of an application architect.
• You understand the technical architecture and re-use existing technical components.
• You assist in scheduled production deployments outside office hours.

PROFILE AND EXPERIENCE

Profile

• Senior IAM engineer with proven, relevant experience and the ability to work independently in a complex identity and access management environment.
• experience in .NET back-end / back-office development.
• Broad IT knowledge and interests.
• Strong planning skills; you dare to challenge the AS-IS and work result-driven.
• You work accurately and plan meticulously.
• You are solution-oriented, communicative and a real team player.
• You have a hands-on mentality and an eye for quality, and you take initiative to optimize development processes.
• Comfortable working with distributed, international teams.
• You can work independently in a complex application landscape and bring continuity to recurring changes.

Required Experience (must-have)

• Proven senior-level experience with Identity & Access Management, including identity governance and administration, identity lifecycle management and user provisioning.
• Hands‑on experience with identity providers such as Keycloak, Duende IdentityServer or Microsoft Entra ID.
• Hands‑on experience with SCIM, OIDC and OAuth 2.1 for provisioning, authentication and authorization integrations.
• Experience with fine‑grained authorization, including OPA, OpenFGA or AuthZen, and with authorization models such as RBAC, ABAC, ReBAC or PBAC.
• .NET / C# back-end development.
• Experience with SQL
• REST APIs — designing, building and consuming RESTful services (JSON).
• Experience with CI/CD pipelines in Azure DevOps to deploy solutions across environments.
• Secure cloud development practices, including Azure Key Vault for sensitive information.
• Source control with Git.
• Experience with Agile methodology and a DevOps culture.

Nice to Have

• Experience delivering IAM-related development or maintenance in a secure customer or partner portal environment.

Languages

• Dutch - proficient
• English - proficient

Inlichtingen

Tetiana Zamiatina [phone]