Identity & Access Architecture Lead - Zero Trust IAM

Allianz Services; Lisboa; Híbrido; EUR 90 000 - 130 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work model

Performance bonus

Pension

Employee shares program

Learning and mobility opportunities

Resumo da oferta

Allianz Services seeks an experienced IS Solution Architect – Identity & Access Management Security to lead design, governance and evolution of enterprise IAM architectures. The role combines deep technical expertise in identity lifecycle, PAM, and access governance with strong governance capabilities to ensure Zero Trust adoption and regulatory compliance across multiple geographies.

You will drive guidance on IAM platforms (Microsoft Entra ID, SailPoint, CyberArk, Okta, Ping Identity,

Qualificações

• Bachelor's degree or higher in Information Security, Computer Science, Engineering, or related technical field.
• 5+ years of experience in Identity & Access Management Architecture or IAM Engineering in enterprise environments.
• Hands-on experience designing and implementing enterprise IAM architectures: identity lifecycle management, access governance, authentication/authorization frameworks, and directory services.
• Strong understanding of Zero Trust Identity principles: least privilege, continuous verification, conditional access, and adaptive authentication.
• Experience with enterprise IAM platforms (Microsoft Entra ID, SailPoint, CyberArk, Okta, Ping Identity, ForgeRock, One Identity) and PAM governance.
• Knowledge of identity federation, SSO, and modern authentication protocols: SAML, OAuth 2.0, OpenID Connect, FIDO2/passkeys, and certificate-based authentication.
• Experience with access governance: RBAC, ABAC, access reviews, and SoD.
• Familiarity with GDPR, ISO standards, NIST CSF, DORA, NIS2.
• Excellent English skills (written and spoken).
• Interest or affinity for IT and Generative AI is valued.

Responsabilidades

• Design and govern enterprise IAM architectures across on-premises, cloud, and multi-geography environments.
• Provide architectural guidance on IAM platforms and modern authentication protocols to enable secure federation and SSO.
• Draft and maintain identity security policies, governance standards, and technical baselines; support governance processes for IAM decisions.
• Define and track KPIs/KRIs for IAM posture and present governance reporting to security committees.
• Contribute to IAM design authority and ARB processes and serve as identity security advisor to IT and business teams.

Conhecimentos

IAM Architecture

Zero Trust

MFA

SSO

SAML

OAuth 2.0

OpenID Connect

FIDO2

Privileged Access

Regulatory Compliance

English (Written and Spoken)

Formação académica

Higher education in Information Security/CS/Engineering

Ferramentas

Microsoft Entra ID

SailPoint

CyberArk

Okta

Ping Identity

ForgeRock

One Identity

PAM

Descrição da oferta de emprego

Allianz Services seeks an experienced IS Solution Architect – Identity & Access Management Security to lead design, governance and evolution of enterprise IAM architectures. The role combines deep technical expertise in identity lifecycle, PAM, and access governance with strong governance capabilities to ensure Zero Trust adoption and regulatory compliance across multiple geographies.

You will drive guidance on IAM platforms (Microsoft Entra ID, SailPoint, CyberArk, Okta, Ping Identity,