IAM Engineer

Templeton & Partners - Innovative & Inclusive Hiring Solutions; Antwerpen; Hybrid; EUR 70,000 - 105,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Templeton & Partners - Innovative & Inclusive Hiring Solutions is seeking a Senior IAM Engineer to evolve an in-house identity orchestration platform and contribute to a modern cloud-native IAM architecture.

You will design, develop and improve IAM solutions, including .NET backends, provisioning, and REST API integration, while working with Entra ID, Keycloak, Duende, and secure OAuth/OIDC. Hybrid onsite in Belgium.

Qualifications

• Strong senior experience in Identity & Access Management.
• Experience with Entra ID, Keycloak or Duende IdentityServer.
• Hands-on knowledge of SCIM, OIDC and OAuth.
• Experience with fine-grained authorization models and REST APIs.

Responsibilities

• Design, develop and improve IAM solutions and identity platforms.
• Build user provisioning and SCIM-based integrations.
• Contribute to cloud-native IAM architecture on Azure and DevOps pipelines.
• Provide senior-level technical guidance and 3rd-line support.
• Collaborate with cross-functional teams across security and engineering.

Skills

IAM / Identity Governance & Admin

Entra ID / Keycloak / Duende Identity

SCIM / OIDC / OAuth

Fine-grained Authorization

REST APIs

Azure DevOps / CI CD

Azure Key Vault

RBAC / ABAC / ReBAC / PBAC

OAuth 2.0 / OpenID Connect

Tools

Keycloak

Duende IdentityServer

OPA

OpenFGA

AuthZen

Job description

Are you a Senior IAM Engineer who enjoys combining identity, security and software engineering?

We’re looking for an experienced IAM Engineer to join a technically challenging environment where you’ll help evolve an in-house identity orchestration platform and contribute to a modern, cloud-native IAM architecture.

What you’ll be working on

You’ll play a key role in designing, developing and improving IAM solutions, including:

• Developing and maintaining .NET / C# backend applications
• Designing and implementing IAM, IGA and identity lifecycle solutions
• Building user provisioning and SCIM-based integrations
• Working with Microsoft Entra ID, Keycloak and/or Duende IdentityServer
• Implementing secure authentication and authorization using OIDC and OAuth
• Designing fine-grained authorization using technologies such as OPA, OpenFGA or AuthZen
• Applying authorization models including RBAC, ABAC, ReBAC and PBAC
• Building cloud-native IAM functionality on Azure
• Working with Azure Functions, Azure Container Apps and Azure Key Vault
• Designing and integrating REST APIs
• Supporting CI/CD through Azure DevOps
• Contributing to IAM architecture, technical design and security improvements
• Providing senior-level technical guidance and 3rd-line support

What we’re looking for

You bring solid senior-level experience in Identity & Access Management and enjoy being hands-on with both development and architecture.

Must-have:

• Strong experience in IAM / Identity Governance & Administration
• Experience with Entra ID, Keycloak or Duende IdentityServer
• Hands-on knowledge of SCIM, OIDC and OAuth
• Experience with fine-grained authorization
• Strong knowledge of REST APIs and SQL
• Experience with Azure DevOps / CI/CD
• Good understanding of secure cloud development and Azure Key Vault
• Git and Agile/DevOps experience
• Ability to work independently in a complex technical environment

Nice to have:

• Experience with IAM solutions for customer or partner portals
• Experience with policy engines such as OPA / OpenFGA / AuthZen
• Experience working with distributed or international teams

What’s on offer?

• Senior-level IAM engineering role with real technical ownership
• Opportunity to shape a modern cloud-native identity platform
• Strong combination of IAM, cybersecurity, .NET and Azure
• Work on challenging topics such as identity governance and fine-grained authorization
• Hybrid working model in Belgium — minimum 2 days/week onsite
• Collaborative environment with experienced architects, developers and security professionals
• A role where your technical input can directly influence the solution