Senior IAM Engineer (all genders)

Zalando; Berlin; On-site; EUR 90,000 - 120,000; Full time

Benefits offered by this job

27 days holiday

40% off fashion and beauty

30% off Lounge by Zalando

Discounts from external partners

Family support

Company pension

Employee shares

Health and wellbeing options

Mental health support

Training platform

2 paid volunteering days

Relocation assistance

Job summary

Zalando is seeking a Senior IAM Engineer to strengthen our cloud-native identity platform. You will design, build, and operate integrations, extend infrastructure-as-code tooling, and automate Joiner-Mover-Leaver processes at scale, across hundreds of services.

You will collaborate with software and security teams, implement SCIM/OIDC/SAML integrations, and contribute to reliability with on-call rotations, alerting, and comprehensive end-to-end tests.

Qualifications

• Hands-on engineering experience with an enterprise IAM or IGA platform and built integrations
• Understanding of Joiner-Mover-Leaver lifecycle, access certifications, and role management
• Proficient in Go and production-grade code, CLIs and tests
• DevOps mindset; IaC and cloud deployments

Responsibilities

• Own and evolve a cloud-native IAM platform, ensuring reliability and security
• Design and maintain integrations with business applications using connectors or APIs
• Extend IaC tooling and custom connectors to fill gaps left by SaaS vendors
• Drive automated provisioning across the Joiner-Mover-Leaver lifecycle
• Build data pipelines for analytics and anomaly detection on IAM data
• Monitor systems, define alerts, and follow SRE practices
• Improve end-to-end test automation focused on API acceptance testing
• Consult stakeholders on cross-domain IAM practices

Skills

IAM platform

Integrations

Go (Golang)

DevOps mindset

SCIM/OIDC/SAML

Tools

Terraform

Job description

THE ROLE & THE TEAM

Identity and Access Management (IAM) is a key technology at Zalando, providing secure access to our services and tools for tens of thousands of employees, partnering businesses, contractors, customer care agents, and logistics staff. As the scale and complexity of our identity landscape grows, so does the engineering challenge behind it. As a Senior IAM Engineer you will work in this dynamic environment on the line between Software Engineering and Systems Engineering, together with a talented and diverse team, influencing, building, and operating the evolving IAM technology stack at Zalando. You will work across identity governance, access lifecycle automation, and platform integrations, making a direct impact on how Zalando manages and secures access at scale.

WHAT WE'D LOVE YOU TO DO (AND LOVE DOING)

Own and evolve a modern, cloud-native IAM platform, keeping it reliable, secure, and ahead of the curve as the identity landscape and business needs change. Design, build, and maintain integrations between our IAM platform and business applications, using native connectors, SCIM interfaces or custom API integrations, owning the result end-to-end. Extend our infrastructure-as-code tooling and custom connector implementations, closing the gaps that SaaS vendors leave uncovered. Drive automated provisioning across the full Joiner-Mover-Leaver lifecycle, reducing manual steps and working toward fully automated coverage across all integrated systems. Build data pipelines for archival, analytics, and anomaly detection on identity and access data, turning IAM events into operational insights. Monitor the systems for which you're responsible; define alerts, participate in on-call rotations, and generally follow Site Reliability Engineering best practices. Improve our end-to-end test automation framework with a focus on acceptance testing against live platform APIs, ensuring reliability of our services and the business processes that depend on them. Manage and consult internal stakeholders on best practices of cross-domain identity and access management, including access models, take their requirements and enhance existing services.

WE'D LOVE TO MEET YOU IF

You have hands-on engineering experience with an enterprise IAM or IGA platform (Saviynt, SailPoint, Okta, or comparable) and have built integrations, connectors, or extensions against it, not just configured workflows through a UI. You understand access governance concepts such as Joiner-Mover-Leaver lifecycle management, access certifications, and role management, and know how they translate into platform logic and custom code. You are highly skilled as a software engineer in a compiled language, with Golang as the preferred choice. You are comfortable writing production-grade code, CLIs, tooling extensions, and automated tests. You have a working understanding of identity protocols (SCIM, OIDC, OAuth2, SAML) and have implemented integrations using them. You have a DevOps mindset: you treat operations as an engineering problem, write infrastructure as code, and are comfortable deploying and running services in a cloud environment. You like distilling domain knowledge and working across system boundaries, taking ambiguous requirements and turning them into well-scoped, well-tested solutions.

OUR OFFER

• 27 days of holiday a year to start for full-time employees (+1 day for every calendar year up to 30 days)
• 40% off fashion and beauty products sold and shipped by Zalando
• 30% off Lounge by Zalando
• discounts from external partners
• Family support, including counselling and dedicated services for parents and carers
• Company pension scheme
• Employee shares programme
• Health and wellbeing options, including Wellhub
• Mental health support and coaching
• Development through our training platform and biannual peer-to-peer review
• 2 paid volunteering days a year
• Relocation assistance (subject to prior agreement)

INCLUSIVE BY DESIGN

At Zalando, our vision is to be the leading European technology platform for fashion and lifestyle - one that thrives on diversity and is truly inclusive by design. We believe that diverse teams fuel innovation and creativity, and we actively seek out talent from all backgrounds. We actively seek to reduce bias in our hiring and employment processes, focusing on your qualifications, skills, and contributions. To support this, we kindly ask that you refrain from including personal details such as your photo, age, or marital status in your CV, ensuring a fair and equitable evaluation based solely on your abilities and potential. We are committed to providing an exceptional and accessible candidate experience for everyone. If you require any accommodations to support you throughout the hiring process, please let us know - we are here to assist you.

Discover more about our commitment to creating a diverse and inclusive workplace: https://jobs.zalando.com/en/our-culture/diversity-and-inclusion

It's the perfect time to join Zalando on our journey, from being a pioneer in the world of e-commerce, to the Starting Point for Fashion in Europe. We connect customers, brands, and partners across 25 markets. Help us drive digital and sustainable solutions for fashion, logistics, advertising and research, bringing head-to-toe fashion to 50 million active customers through a team of diverse skill-sets, cultural backgrounds, and interests. Our values do.More - our sustainability strategy

Follow us on Instagram: instagram.com/insidezalando