Principal Cybersecurity Engineer – Identity & Access Management

Jobtailor; Deutschland; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

Jobtailor is seeking an experienced enterprise IAM Architect in Germany to own governance, architecture strategy, and multi-year roadmaps aligned with Zero Trust and business priorities. You will influence funding, lead design authority for identity integrations, and guide authentication models across platforms.

Candidates should have 6–8 years in cybersecurity and strong executive communication skills, with hands-on experience across Entra ID, Okta, SailPoint, and CyberArk.

Qualifikationen

• Bachelor’s degree or equivalent in IT, security, or engineering.
• 6–8 years in cybersecurity, identity security, or security engineering.
• Deep expertise in IAM governance, architecture and risk management.
• Proven experience leading enterprise IAM initiatives.
• Experience with zero trust identity architectures and admin models.
• Certifications such as CISSP/CCSP/SABSA recommended.

Aufgaben

• Own enterprise IAM governance and architecture strategy.
• Define multi-year IAM roadmap aligned to Zero Trust and priorities.
• Influence funding, prioritization, sequencing of IAM initiatives.
• Represent identity risk to senior leadership and governance forums.
• Establish enterprise identity reference architectures and guardrails.
• Act as final design authority for identity integrations and access models.
• Define authentication, authorization, and privilege models across platforms.
• Ensure consistency across workforce, application, and privileged identities.
• Guide adoption of password-less, JIT access, and adaptive authentication.
• Define IAM policies, standards, and control frameworks.
• Oversee access governance methodologies (reviews, certifications, exceptions).
• Establish IAM risk metrics and maturity assessments.
• Drive remediation of systemic identity risks.
• Provide executive-level support for audits and regulatory inquiries.
• Partner with IT, HR, Legal, Compliance, and Engineering teams.
• Influence identity operating models without direct operational ownership.
• Lead working groups and design councils related to identity.
• Evaluate IAM, IGA, and PAM technologies from a strategic perspective.
• Define success criteria for IAM tooling and integrations.
• Stay current with identity threat trends and evolving best practices.

Kenntnisse

IAM governance

Executive communication

Stakeholder management

Zero Trust

RBAC/ABAC

Identity lifecycle

Architecture influence

Ausbildung

Bachelor’s degree in IT / Information Security / CS

Tools

Entra ID

Okta

SailPoint

CyberArk

Jobbeschreibung

Responsibilities

• Own the enterprise IAM governance and architecture strategy
• Define multi-year IAM roadmap aligned to Zero Trust and business priorities
• Influence funding, prioritization, and sequencing of IAM initiatives
• Represent identity risk and posture to senior leadership and governance forums
• Establish enterprise identity reference architectures and guardrails
• Act as final design authority for identity integrations and access models
• Define authentication, authorization, and privilege models across platforms
• Ensure consistency across workforce, application, and privileged identities
• Guide adoption of password‑less, JIT access, and adaptive authentication
• Define enterprise IAM policies, standards, and control frameworks
• Oversee access governance methodologies (reviews, certifications, exceptions)
• Establish IAM risk metrics and maturity assessments
• Drive remediation of systemic identity risks
• Provide executive‑level support for audits and regulatory inquiries
• Partner with IT, HR, Legal, Compliance, and Engineering teams
• Influence identity operating models without direct operational ownership
• Lead working groups and design councils related to identity
• Evaluate IAM, IGA, and PAM technologies from a strategic perspective
• Define success criteria for IAM tooling and integrations
• Stay current with identity threat trends and evolving best practices

Requirements

• Bachelor’s degree in information technology, Information Security/Assurance, Computer Science, Engineering, or related field or equivalent combination of education and experience
• 6-8 years of experience in cybersecurity, identity security, or security engineering
• Deep expertise in IAM governance, architecture, and risk management
• Proven experience leading enterprise‑scale IAM initiatives
• Strong understanding of zero trust identity architectures, RBAC / ABAC and role governance, privileged access governance and admin models, and Identity lifecycle / access assurance
• Experience influencing architecture and security outcomes across large organizations
• Excellent executive communication and stakeholder management skills.
• Identity platform experience across multiple vendors (Entra ID, Okta, SailPoint, CyberArk, etc.)
• Experience in regulated or complex enterprise environments
• Certifications such as CISSP, CCSP, SABSA, or identity‑focused credentials.