Senior Identity Governance Consultant – Architect

Jobtailor; München; Vor Ort; EUR 70.000 - 110.000; Vollzeit

Zusammenfassung

Jobtailor seeks a skilled Identity Governance specialist to design and implement JML workflows and identity models using Microsoft Entra ID Governance. You will model identities, roles, and policies, and integrate HR systems such as SAP or Workday via SCIM/REST/AD/Entra.

The role includes automation of controls, SoD, delegations and recertifications, plus PIM integration and monitoring. Depending on seniority, you will lead workstreams, mentor teams and perform quality assurance.

Qualifikationen

• Experience with identity governance processes (JML, SoD, recertifications).
• Knowledge of Entra ID, AD DS and auth/authz protocols (LDAP, Kerberos, OAuth, OIDC, SAML).
• Experience in IGA/IAM provisioning, access reviews or entitlement requests.
• End-to-end design of IGA suites (Entra ID Governance, One Identity, SailPoint, Omada).
• Familiarity with PIM integration and automation (PowerShell, REST).

Aufgaben

• Design and implement Joiner/Mover/Leaver workflows.
• Model identities, roles and policies (RBAC/ABAC).
• Integrate HR systems (SAP/Workday) via SCIM/REST/AD/Entra.
• Automate controls and recertification processes.
• Lead workshops and provide governance guidance and QA.

Kenntnisse

Identity Governance

RBAC/ABAC

PowerShell

SQL

SCIM APIs

HR Integration

Workshop Facilitation

Ausbildung

Bachelor's degree in IT/IS

Tools

Microsoft Entra ID

AD DS

One Identity

SailPoint

Omada

SAP

Workday

Jobbeschreibung

You design and implement identity governance processes (Joiner/Mover/Leaver - JML, birthright access, recertifications, request/approval workflows) in Microsoft Entra ID Governance.
Modeling of identities, roles (RBAC/ABAC) and policies; integration of HR systems (e.g., SAP/Workday) and target systems via SCIM/REST/AD/Entra, including connector design.
Implementation of campaigns, segregation-of-duties (SoD) rules, delegation and recertification processes; automation of controls.
Integration with Privileged Identity Management (PIM), logging/monitoring and regulatory requirements (e.g., ISO 27001, SOX, NIS2/DORA — customer-specific).
Conduct workshops, create guidelines and operations concepts; depending on seniority, provide technical leadership of workstreams, mentoring and quality assurance (concept/design reviews).

Requirements

• Passion for Identity & Access topics
• Structured working style and willingness to learn
• Basic knowledge of Microsoft Entra ID, AD DS and common auth/authz protocols (LDAP, Kerberos, OAuth 2.0, OIDC, SAML)
• Initial practical experience in IGA or IAM (e.g., access reviews, entitlement requests, provisioning) — from university, internship or 1–2 years of professional experience
• Basic skills in PowerShell/SQL or REST/SCIM APIs and an understanding of JML processes
• Several years of end-to-end experience in the design and implementation of an IGA suite (Microsoft Entra ID Governance, One Identity, SailPoint, Omada)
• Governance frameworks (RBAC/ABAC), policy and control design, PIM integration, automation (e.g., PowerShell, rules/policies, REST) and operations/transition concepts
• Consulting skills: client workshops, architecture/decision documents, stakeholder management.

Core Competencies

Demonstrates expertise in designing and implementing identity governance processes, including Joiner/Mover/Leaver workflows and integration with HR systems. Proficient in governance frameworks, policy design, and automation, with a strong foundation in Microsoft Entra ID and related technologies.

Highest-signal resume keywords

• Microsoft Entra ID Governance
• Identity Governance Administration (IGA)
• Role-Based Access Control (RBAC)
• Privileged Identity Management (PIM)
• PowerShell/SQL Scripting

ATS Optimization Keywords

Hard Skills

• Identity Governance Processes
• Joiner/Mover/Leaver (JML)
• SCIM/REST APIs
• Access Reviews
• Entitlement Requests
• Policy Design
• Automation Controls
• Segregation of Duties (SoD)
• Integration with HR Systems
• Common Auth/Authz Protocols

Soft Skills

• Structured Working Style
• Willingness to Learn
• Consulting Skills
• Stakeholder Management
• Technical Leadership

Certifications & Qualifications

• ISO 27001
• SOX Compliance
• NIS2/DORA Compliance

Industry Keywords

• Identity and Access Management (IAM)
• Governance Frameworks
• Policy and Control Design
• Logging/Monitoring
• Automation

Tools & Technologies

• Microsoft Entra ID
• Active Directory Domain Services (AD DS)
• SAP
• Workday
• One Identity
• SailPoint
• Omada