Cyber Security Consultant - Identity and Access Management (f/m/div)

Infineon Technologies AG; Porto; On-site; EUR 50,000 - 70,000; Full time

Job summary

Infineon Technologies AG is looking for a Cyber Security Consultant specializing in Identity and Access Management in Porto, Portugal. You will be an expert in IAM, shaping secure solutions and setting standards while driving risk assessments and architectural decisions.

To succeed in this role, you should have a degree in Computer Science or a related field, strong IAM expertise, and a solution-driven mindset. You will collaborate with various teams to enhance the security posture of crucial systems.

Qualifications

• Proactive and solutions-driven professional.
• Strong knowledge of security principles and cryptographic concepts.
• Experience performing threat modelling and cybersecurity risk assessments.

Responsibilities

• Advise on secure design, implementation, and operation of identity services.
• Lead and facilitate risk assessments and secure design reviews.
• Establish IAM-related security controls and consistent IAM standards.

Skills

Identity & Access Management (IAM)

Cybersecurity risk assessments

Strong communication skills

Critical thinking

Cloud and hybrid environments

Education

Degree in Computer Science or IT Security

Tools

Microsoft Active Directory/Entra ID

Job description

As a Cyber Security Consultant – Identity and Access Management, you will play a key role in our Business Technology team within Corporate Cyber Security & Privacy. You’ll be the go‑to expert for Identity & Access Management (IAM), shaping secure solutions, setting IAM standards, driving risk assessments, and influencing cutting‑edge architectural decisions to protect and future‑proof critical systems.

Key responsibilities in your new role

• Act as a trusted subject matter expert for Identity & Access Management, advising architecture, engineering, and operational teams on the secure design, implementation, and operation of identity services and access control mechanisms.
• Define and establish IAM‑related security controls that reflect current threats, emerging technologies, and modern Zero Trust and identity‑centric security models.
• Advise on and establish consistent IAM standards, patterns, and best practices across Infineon departments, covering authentication, authorization, identity lifecycle management, and privileged access.
• Lead and facilitate risk assessments, threat modelling, and secure design reviews for business‑critical systems, platforms, and services (e.g., cloud, manufacturing, R&D platforms).
• Partner with enterprise architects, domain architects, and service owners to translate IAM security controls into functional and non‑functional requirements.
• Influence and challenge architectural and design decisions by balancing risks, business value, operational resilience, and engineering feasibility.

Your Profile

You are a proactive and solutions‑driven professional with strong communication skills, able to collaborate with diverse stakeholders and articulate ideas clearly in an international environment. With a customer‑focused mindset and a drive to identify challenges, push initiatives forward, and continuously improve, you thrive in a role where critical thinking and innovation shape the way ahead.

• Degree in Computer Science, Information Technology, IT Security or related field of study.
• Deep expertise in Identity & Access Management (IAM), including authentication, authorization, identity lifecycle management, privileged access, federation concepts, and IAM platforms (e.g., Microsoft Active Directory/Entra ID).
• Strong knowledge of identity‑related security controls for cloud, on‑premises, and hybrid environments, including identity providers, directory services, and access management platforms.
• Advanced IAM architecture and system design skills, covering modern access control models, session management, API access security, and service‑to‑service identity.
• Experience performing cybersecurity risk assessments, threat modelling (e.g., STRIDE), across software and infrastructure systems.
• Strong understanding of security principles (least privilege, ZeroTrust, defense in depth, trust boundaries), and cryptographic concepts relevant to IAM (e.g., token signing, certificate‑based authentication, key management).
• Proven experience aligning IAM controls with enterprise risk management, compliance frameworks (e.g., NIST, ISO 29146), regulatory expectations, and audit requirements.
• In‑depth knowledge of IAM capabilities for modern cloud‑native and distributed platforms, including token‑based authentication, just‑in‑time access, workload identity, and federation protocols.
• Fluency in English (mandatory).

At Infineon, we base our recruiting decisions on the applicant’s experience and skills and are committed to give all applicants and employees equal opportunities.