Senior IAM Engineer (all genders)

Zalando GmbH; Berlin; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

27 days holiday per year

Fashion & beauty discounts

Family support

Company pension

Employee shares programme

Health and wellbeing options

Mental health support

Training platform

2 paid volunteering days

Relocation assistance

Job summary

Zalando is seeking a Senior IAM Engineer to shape and operate our cloud-native identity platform at scale. You will design, implement, and operate IAM services, connecting them to business applications via native connectors or APIs, and extending our infrastructure-as-code approach.

With hands-on Golang development, you’ll support Joiner-Mover-Leaver lifecycle automation, data pipelines for analytics, and cross-domain governance while collaborating with security, platform, and product teams

Qualifications

• Experience with an enterprise IAM/IGA platform and building integrations.
• Strong production coding experience in Golang.
• Knowledge of SCIM, OIDC, OAuth2 and SAML protocols.

Responsibilities

• Own and evolve a modern cloud-native IAM platform with reliability and security.
• Build and maintain integrations between IAM and business applications using connectors or APIs.
• Extend IaC tooling and custom connectors; automate the Joiner-Mover-Leaver lifecycle.
• Create data pipelines for analytics and anomaly detection on identity data.
• Define alerts, participate in on-call rotations, and follow SRE best practices.
• Improve end-to-end test automation for live platform APIs and services.
• Consult stakeholders on cross-domain IAM strategies and requirements.

Skills

Golang

Cloud platforms

Identity & Access Management

SCIM/OIDC/OAuth2/SAML

DevOps mindset

Infrastructure as code

On-call rotations

Education

Bachelor's degree in CS/Engineering

Tools

Saviynt

SailPoint

Okta

Job description

Identity and Access Management (IAM) is a key technology at Zalando, providing secure access to our services and tools for tens of thousands of employees, partnering businesses, contractors, customer care agents, and logistics staff. As the scale and complexity of our identity landscape grows, so does the engineering challenge behind it.

As a Senior IAM Engineer you will work in this dynamic environment on the line between Software Engineering and Systems Engineering, together with a talented and diverse team, influencing, building, and operating the evolving IAM technology stack at Zalando. You will work across identity governance, access lifecycle automation, and platform integrations, making a direct impact on how Zalando manages and secures access at scale.

WHAT WE’D LOVE YOU TO DO (AND LOVE DOING)

• Own and evolve a modern, cloud-native IAM platform, keeping it reliable, secure, and ahead of the curve as the identity landscape and business needs change.
• Design, build, and maintain integrations between our IAM platform and business applications, using native connectors, SCIM interfaces or custom API integrations, owning the result end-to-end.
• Extend our infrastructure-as-code tooling and custom connector implementations, closing the gaps that SaaS vendors leave uncovered.
• Drive automated provisioning across the full Joiner-Mover-Leaver lifecycle, reducing manual steps and working toward fully automated coverage across all integrated systems.
• Build data pipelines for archival, analytics, and anomaly detection on identity and access data, turning IAM events into operational insights.
• Monitor the systems for which you’re responsible; define alerts, participate in on-call rotations, and generally follow Site Reliability Engineering best practices.
• Improve our end-to-end test automation framework with a focus on acceptance testing against live platform APIs, ensuring reliability of our services and the business processes that depend on them.
• Manage and consult internal stakeholders on best practices of cross-domain identity and access management, including access models, take their requirements and enhance existing services.
• You have hands-on engineering experience with an enterprise IAM or IGA platform (Saviynt, SailPoint, Okta, or comparable) and have built integrations, connectors, or extensions against it, not just configured workflows through a UI.
• You understand access governance concepts such as Joiner-Mover-Leaver lifecycle management, access certifications, and role management, and know how they translate into platform logic and custom code.
• You are highly skilled as a software engineer in a compiled language, with Golang as the preferred choice. You are comfortable writing production-grade code, CLIs, tooling extensions, and automated tests.
• You have a working understanding of identity protocols (SCIM, OIDC, OAuth2, SAML) and have implemented integrations using them.
• You have a DevOps mindset: you treat operations as an engineering problem, write infrastructure as code, and are comfortable deploying and running services in a cloud environment.
• You like distilling domain knowledge and working across system boundaries, taking ambiguous requirements and turning them into well-scoped, well-tested solutions.

OUR OFFER

Zalando provides a range of benefits, here’s an overview of what you can expect. Ask your Talent Acquisition Partner to learn more about what we offer.

• 27 days of holiday a year to start for full-time employees (+1 day for every calendar year up to 30 days)
• 40% off fashion and beauty products sold and shipped by Zalando, 30% off Lounge by Zalando, discounts from external partners
• Family support, including counselling and dedicated services for parents and carers
• Company pension scheme
• Employee shares programme
• Health and wellbeing options, including Wellhub
• Mental health support and coaching
• Development through our training platform and biannual peer-to-peer review
• 2 paid volunteering days a year
• Relocation assistance (subject to prior agreement)

INCLUSIVE BY DESIGN

If you think you have what it takes, we encourage you to apply even if you don't meet every single requirement. You may just be the right candidate for this or other roles!

At Zalando, our vision is to be the leading European technology platform for fashion and lifestyle - one that thrives on diversity and is truly inclusive by design. We believe that diverse teams fuel innovation and creativity, and we actively seek out talent from all backgrounds.

We actively seek to reduce bias in our hiring and employment processes, focusing on your qualifications, skills, and contributions. To support this, we kindly ask that you refrain from including personal details such as your photo, age, or marital status in your CV, ensuring a fair and equitable evaluation based solely on your abilities and potential.

We are committed to providing an exceptional and accessible candidate experience for everyone. If you require any accommodations to support you throughout the hiring process, please let us know – we are here to assist you.

About Zalando

Founded in Berlin in 2008, Zalando is the leading European technology platform for fashion and lifestyle. Connecting 62 million active customers with more than 7,000 brands across 29 markets, our operations are built on a unique AI-powered data and infrastructure platform. For our customers, our multi-app approach - comprising Zalando, ABOUT YOU, and Lounge by Zalando - delivers an inspiring, highly personalized shopping experience, serving different customers with different needs. For our partners, we are building the operating system for e-commerce. Through ZEOS, Tradebyte, and SCAYLE, we open our logistics, software, and service capabilities to brands and retailers, enabling them to seamlessly scale their businesses across borders.