Identity Management Engineer

B. Braun Melsungen AG; Poznań; Hybrid; PLN 156,000 - 201,000; Full time

Benefits offered by this job

Co-funding of professional development

Group life insurance

Job summary

B. Braun Melsungen AG in Poznań is seeking an Identity Management Engineer to develop and operate the CIAM platform. You will build secure backend services and authorization models using One Identity Manager, ensuring compliance with security and regulatory requirements.

The role is hybrid with collaboration across IT and security teams. You’ll implement identity lifecycle processes, data synchronization, threat modeling, and provide 2nd/3rd line support for CIAM services.

Qualifications

• Hands-on experience with OneIdentityManager or similar.
• IAM/CIAM concepts, access governance, and lifecycle management.
• VB.Net and PowerShell scripting knowledge.
• Authorization models including ReBAC.
• System integration and SQL queries experience.
• Nice-to-have: Azure cloud services and event-driven architecture.
• Nice-to-have: GDPR knowledge and DevOps practices, CI/CD.

Responsibilities

• Develop and maintain CIAM platform based on One Identity Manager.
• Implement scalable backend services for customer admin and identity lifecycle.
• Build secure service layers and processes from designs.
• Contribute to CIAM strategy and roadmap.
• Extend One Identity Manager capabilities and custom sync solutions.
• Data mapping, transformation and consistency checks.
• Ensure reliable data exchange across systems.
• Provide 2nd/3rd level CIAM support.
• Monitor performance and troubleshoot identity services.
• Ensure high availability of identity services.

Skills

OneIdentityManager

IAM/CIAM concepts

VB.Net

PowerShell

Authorization models

REST API development

OAuth2/OpenID Connect

GDPR knowledge

Tools

Azure cloud services

EMS systems

Job description

You’re an important part of our future. Hopefully, we're also a part of your future! At B. Braun, we protect and improve the health of people worldwide. You support this vision, bringing expertise and sharing innovation, efficiency and sustainability as values. That’s why we would like to keep developing our company with you. Keeping your future in mind, we’re making a joint contribution to health care worldwide, with trust, transparency and appreciation. That's Sharing Expertise.

Identity Management Engineer

Functional Area: Information Technology

Working Model: Hybrid

Requisition ID: 12969

The Identity Management Engineer is responsible for developing and operating the B. Braun Customer Identity and Access Management (CIAM) platform. The role focuses on building secure backend services and authorization models using One Identity Manager. This includes implementing identity lifecycle processes, integration with custom APIs, and ensuring compliance with security, governance, and regulatory requirements.

Duties and responsibilities:

• Develop andmaintainthe Identity ManagementPlatformbased onOne Identity Manager
• Implement scalable backend services for:Customer administration,Identity lifecycle processes (Joiner, Mover, Leaver)
• Build secure, high-performance service layers and processes based on designs
• Contribute to: CIAM strategy and roadmap
• Implement and extendOne IdentityManager capabilities
• Developcustom synchronization solutions
• Implement data mapping, transformation, and consistency checks
• Ensure reliable data exchange and synchronization across systems
• Implement and support threat modeling and risk assessments
• Ensure compliance with:DPIA (Data Protection Impact Assessment),Data retention policies,DSR (Data Subject Rights)
• Enforce secure coding and identity security best practices
• Provide2nd/3rd level support for CIAM services and applications
• Monitor system performance and troubleshoot issues
• Ensure high availability and reliability of identity services

Required Qualifications

Must-have

• Hands-on experience withOneIdentityManager or similar
• Understanding ofIdentity & Access Management (IAM / CIAM)concepts, access governance, and identity lifecycle management processes.
• Familiarity with: Programming language:(VB.Net), Scripting languages(PowerShell)
• Solid understanding of: Authorization models, especiallyReBAC
• Experience with: Integration and synchronization between systems, SQL Database (simple queries), Building processes

Nice-to-have

• Experience with:Azure cloud services,Event-driven architecture
• Understanding of: GDPR and data privacy regulations,CI/CD pipelines and DevOps practices
• Familiarity with EMS systems or contract management platforms
• Experience with: API development (REST), Authentication protocols (OAuth2, OpenID Connect)

Personal Skills

• Strong analytical and conceptual thinking
• High security and quality awareness
• Ability to work in complex, regulated environments
• Strong ownership and proactive mindset
• Good communication skills with technical and business stakeholders
• Additional social funds for summer holidays and Christmas
• Co-funding of a Multisport card and private medical care
• Opportunity to join group life insurance
• Fundings for trainings and conferences
• Co-funding of professional development
• Free language lessons and access to an e-learning platform
• Team-building and sports events

Salary ranges: 14.000 - 18.000 PLN gross monthly.

The controller of the personal data contained in your CV and provided when you create an account in our application is B. Braun Business Services Poland Sp. z o.o. in Nowy Tomysl, 14 Tysiąclecia St. We process this data on the basis of Article 22 of the Labour Code, and if you provide us with more data than required by the Labour Code, we process it on the basis of your consent. The purpose of this processing is to consider your application in the recruitment process.To find out more, such as how long we will keep your personal data, you can read the full information clause here:Klauzula Informacyjna dla Kandydatów - Kariera w Naszej Firmie - B. Braun You can contact our Data Protection Officer at any time regarding your personal data:[e-mail] .

Provider

Description

Enabled

SAP as service provider

• "route" is used for session stickiness
• "careerSiteCompanyId" is used to send the request to the correct data center
• "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor