DevOps Engineer IAM 4 Employees Authentication

Rabobank; Utrecht; Hybrid; EUR 46,000 - 65,000; Full time

Benefits offered by this job

Thirteenth month

8% holiday allowance

10% Employee Benefit Budget

Development budget €1,400 per year

Hybrid working

Job summary

Rabobank is seeking an IAM Engineer to shape the future of technology within IAM and ensure flawless IT fulfilment for its employees. The role focuses on IAM 4 Employees, delivering an end-to-end IAM Identity Fabric with monitoring, reporting, and tight integration with onboarding across Rabobank’s offices nationwide and beyond.

You will work in a DevOps-driven environment with a blend of 50% development and 50% operations, handling security keys (YubiKey), access management, and

Qualifications

• Academic degree in computer science or related field.
• Strong knowledge of IAM protocols (OAuth/OIDC, SAML).
• Pro-active, hands-on and practical mindset.
• Excellent Dutch and English communication.

Responsibilities

• Lead decomposition of legacy applications within Rabobank.
• Translate business requirements into IAM designs aligned with IT architecture.
• Ensure the DevOps team has the right information to build or decompose applications.
• Provide IAM solutions and manage employee access; ensure data is reliable and compliant.

Skills

OAuth / OIDC

SAML

Kerberos/NTLM

LDAP authentication

SCIM

Education

Bachelor/Master in Computer Science

Job description

• Salary: Gross monthly salary between EUR 4,105 and EUR 5,862 (scale 08)for a 36-hour work week.
• Extras: a thirteenth month, 8% holiday allowance, and a 10% Employee Benefit Budget.
• Development budget: EUR 1,400 development budget per year for your growth and development.
• Hybrid working: a balance between home and office work (possible for most roles).
• Pension: decide for yourself the amount of your personal contribution.

As an IAM (Identity and Access Management) Engineer, you’ll play a pivotal role in shaping the future of technology within IAM. Your work will directly impact all Rabobank employees, ensuring flawless IT fulfilment, specifically focused on IAM 4 Employees.

Identity & Access Management (IAM) is a core capability for Rabobank. IAM ensures that employees and machines have access to the right resources, at the right time, for the right reasons — in a simple, user‑friendly and secure way. Hopefully you’re smiling when you see how it’s phrased while knowing all the complexity underneath.

The purpose of Tribe IAM is to deliver an end‑to‑end IAM Identity Fabric, including monitoring and reporting that keeps Rabobank in control of all access within the bank. The IAM domain is broad including the access management, authentication, cryptography and certificate services of the bank.

With everything that is happening such as geopolitical tensions, post quantum cryptography, AI agents that need their access controlled and a bank landscape always requiring further standardization there is more than enough change to challenge you as an engineer.

IT consists of People, Processes and Technology. As an DevOps Engineer (50% Dev and 50% Ops), there will be more focus on People & Processes. With managing the Security Key, our solution is the YubiKey and a lot of People & Process is involved to manage Employee access to their laptop and applications. As you can understand, this consists also of managing a variety of stakeholders. Examples here are instructing and explaining the use of the Security Key to the Service desk and writing instructions for them, regular support onboarders and all the offices throughout the country and even worldwide. Of course there’s also technology involved, where you can solve issues yourself or maybe need to be the Point of contact with external parties to solve problems. In te end we try to be as secure and efficient as possible.

Other practical Examples

• Lead the decom of legacy applications throughout the bank.
• Translate business requirements into designs aligned with the chosen business and IT architecture framework
• Ensure the DevOps team has the right information to build or decom applications
• Supporting IAM solutions and employee access management within Rabobank. Ensure IAM data is reliable, traceable, and fit for regulatory purposes (e.g. DORA, NIS2, internal risk & control frameworks).

Top responsibilities

• Decommission legacy applications
• Develop platforms, tools, pipeline extensions, and templates to enhance the developer experience for other development teams.
• Design and deploy solutions on cloud platforms and on prem.
• Manage, monitor, and troubleshoot solutions (DevOps).
• Provide support and consultancy to other teams to enable them to use our solutions.

Besides that, you will be a sparring partner for business, the development team, product owner, and other stakeholders. You will be and remain abreast of the latest market and technological developments and incorporate these in the execution of your designs. You will also play a key role in ensuring the DevOps team has the right information to translate your capabilities towards a solution design.

Together we achieve more than alone

We believe in the power of difference. Bringing together people's differences is what makes us an even better bank. So, we are very curious about what you can bring to our team at IAM Tribe.

The IAM Tribe team is responsible for ensuring the security and integrity of digital assets related to employee access. Working together is the way we work; as 1 analytical and technical team at Rabobank.

Talking of Rabobank: We are a Dutch bank that operates in 35 countries for over 9 million customers. Together with these customers, our members and partners we stand side by side to create a world in which everyone has access to enough healthy food. In the Netherlands we work to create a country in which people are happy with how they live, work and do business.

You bring:

• Academic thinking and work level with a Bachelor/Master degree in computer science or a related field
• Knowledge and implementation experience with the usual IAM protocols for authentication, authorization, user provisioning and single sign-on, such as OAuth, OpenID Connect, SAML, Bearer Token, Kerberos/NTLM, LDAP authentication, SCIM
• You are pro‑active, hands‑on and have a practical mindset.
• You believe in process automation as a crucial part of service delivery.
• You are a Critical Thinker and always investigate the Root Cause.
• Excellent communication in Dutch and English is required and you are able to level with the business as well as our IT colleagues
• Requirement analysis (Master)
• Networking (Experienced)