System Administrator, Identity & Access Management

Jobtailor; Deutschland; Vor Ort; EUR 70.000 - 110.000; Vollzeit

Zusammenfassung

Jobtailor in Germany seeks an experienced IAM professional to own and operate our identity platform and access governance. You will manage the identity lifecycle, provisioning, and revocation, and oversee external collaboration controls for guest access and cross-tenant work.

You will also handle non-human identities, conditional access, and PIM, while driving SSO/SCIM integrations and RBAC maintenance across SaaS apps.

Qualifikationen

• 4+ years hands-on systems administration with IAM responsibility.
• Strong IAM principles including lifecycle, RBAC, least privilege, separation of duties, access certification, and PAM.
• Experience administering B2B/guest identities and external collaboration controls.
• Experience designing and operating SSO and SCIM provisioning for SaaS apps.
• Experience with secrets management and integration into workflows.
• Experience with auditing, compliance and regulated environments preferred.
• Microsoft certifications: SC-300 strongly preferred; MS-102/MD-102/AZ-104 beneficial.

Aufgaben

• Be the operational owner of our identity platform and access governance program.
• Own the full identify lifecycle including automated provisioning/deprovisioning and timely access revocation.
• Govern external identities and cross-tenant collaboration with guest access reviews.
• Manage non-human identities including service principals, workload identities and service accounts.
• Administer conditional access policies, identity protection, and PIM.
• Design and operate SSO and SCIM provisioning integrations across SaaS apps.
• Lead access reviews and RBAC maintenance across systems.
• Manage privileged access including break-glass and just-in-time elevation.
• Enforce external collaboration governance and decommission guest accounts.
• Support IAM audit, compliance evidence, and incident response.

Kenntnisse

IAM principles

RBAC

Privileged access

SSO provisioning

SCIM provisioning

External collaboration

Secrets management

Audit & compliance

GxP familiarity

Customer service

Tools

Low-code platforms

IGA tooling

Jobbeschreibung

Responsibilities

• Be the operational owner of our identity platform and access governance program, responsible for "who — and what — has access to what".
• Own the full identify lifecycle including automated provisioning/deprovisioning, and timely access revocation.
• Govern external identities: Entra External ID / B2B guest access, cross-tenant collaboration, access packages, and routine guest access reviews.
• Manage non-human identities: service principles, managed identities workload identities, and service accounts, including credential rotation, secret/certificate lifecycle, federated credentials.
• Administer ID platform: conditional access policies, new program rollouts, identity protection, risk-based access controls, and Privileged Identity Management (PIM).
• Design and operate SSO and SCIM provisioning integrations across the SaaS application portfolio.
• Lead periodic access reviews and recertification campaigns; maintain least-privilege and role-based access control (RBAC) models across M365, Azure, and SaaS systems.
• Manage privileged access: break-glass accounts, admin role assignments, just-in-time (JIT) elevation, and segregation of duties.
• Establish and enforce external collaboration governance: which tenants can collaborate with Dianthus, what data can be shared, how guest accounts are sponsored, and how they are decommissioned.
• Support IAM audit and compliance evidence collection.
• Support the response to identity-related security events in partnership with the cyber team.

Requirements

• 4+ years of hands‑on systems administration experience, with at least 2 years with explicit IAM responsibility.
• Strong understanding of IAM principles: identity lifecycle, RBAC, least privilege, separation of duties, access certification, and privileged access management.
• Experience administering B2B / guest identities and external collaboration controls.
• Working knowledge of non‑human identity management: service principals, managed identities, workload identity federation, and secret/certificate rotation.
• Experience designing and operating SSO and SCIM provisioning integrations for SaaS applications.
• Experience with low‑code automation platforms for workflow and integration automation.
• Demonstrated experience providing technical support to end‑users, with strong customer service orientation and communication skills.
• Strong troubleshooting skills and a security‑conscious, service‑oriented mindset.
• Experience in a regulated industry preferred. (biotech, pharma, healthcare, finance) with exposure to IAM audit controls.
• Familiarity with GxP / 21 CFR Part 11 requirements for identify and access controls preferred.
• Experience implementing or operating an Identity Governance & Administration (IGA) solution preferred.
• Experience with secrets management platforms and integrating them into application workflows preferred.
• Microsoft certifications: SC-300 (Identity and Access Administrator) strongly preferred; also MS-102, MD-102, or AZ-104.

Core Competencies

Demonstrates expertise in Identity and Access Management (IAM) principles, including identity lifecycle management, role‑based access control (RBAC), and privileged access management. Proficient in designing and operating SSO and SCIM integrations for SaaS applications while ensuring compliance with industry regulations.