IAM Engineer

Jobgether; Germany (OH); Remote; USD 92,000 - 127,000; Full time

Benefits offered by this job

Fully remote work environment

Enterprise-level cybersecurity work

Modern IAM platforms exposure

Cross-functional collaboration

Professional growth opportunities

Competitive compensation

Job summary

Jobgether is seeking an IAM Engineer based in Germany to strengthen enterprise security through identity governance, access management, and Zero Trust initiatives. You will design and maintain secure identity solutions that protect critical systems and sensitive data across cloud and on-prem environments.

The role blends security strategy, compliance support, and cross-functional collaboration, working with SailPoint Identity Security Cloud/IdentityIQ and Okta, enforcing least-privilege access,

Qualifications

• 5+ years in Security Engineering, IAM, or related roles.
• Hands-on with SailPoint Identity Security Cloud/IdentityIQ and Okta administration.
• Knowledge of IAM concepts: RBAC, ABAC, least-privilege, and PAM.

Responsibilities

• Lead IAM governance frameworks aligned with security best practices and regulatory requirements.
• Design, implement, and manage identity governance solutions using SailPoint and Okta.
• Enforce least-privilege access and lifecycle management across users and privileged accounts.
• Lead access reviews, certifications, and remediation of access exceptions.
• Develop and maintain secrets management practices and encryption standards.

Skills

IAM expertise

Identity governance

Zero Trust

RBAC/ABAC

Secrets management

Cloud security

Documentation & communication

Tools

SailPoint Identity Security Cloud/IdentityIQ

Okta

AWS Secrets Manager

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an IAM Engineer based in Germany.

This role offers the opportunity to strengthen enterprise security through identity governance, access management, and Zero Trust initiatives.

You will design and maintain secure identity solutions that protect critical systems and sensitive data.

The position combines technical expertise, security strategy, compliance support, and cross-functional collaboration.

You will work with modern IAM platforms, cloud security tools, and enterprise security frameworks to improve access controls.

Your contributions will directly support risk reduction, regulatory readiness, and secure digital operations.

This is an ideal opportunity for an experienced security professional passionate about identity, automation, and cybersecurity excellence.

Accountabilities:

As an IAM Engineer, you will lead identity and access management initiatives, ensuring secure, compliant, and efficient access across enterprise environments. You will help establish strong governance practices, implement security controls, and support the organization’s broader cybersecurity strategy.

• Lead and maintain IAM governance frameworks aligned with security best practices and regulatory requirements.
• Design, implement, and manage identity governance solutions using SailPoint Identity Security Cloud/IdentityIQ as the primary IAM platform and Okta as a secondary platform.
• Enforce least-privilege access models, role-based access controls, and secure access policies across users, services, and privileged accounts.
• Manage access lifecycle processes, including joiner, mover, and leaver workflows.
• Lead quarterly access reviews, access certifications, and remediation of access exceptions.
• Design and maintain secrets management solutions, including secure storage, credential rotation, and lifecycle management for sensitive information.
• Support engineering teams with secure secrets handling practices and integration patterns.
• Validate patch compliance, identify security gaps, and coordinate remediation activities based on risk priorities.
• Define and enforce encryption standards for data protection across cloud and enterprise systems.
• Support key management practices and secure communication protocols.
• Promote Zero Trust security principles through identity-centric access controls and continuous verification practices.
• Prepare compliance documentation, audit evidence, and security reports while partnering with governance and audit teams.

Requirements:

The ideal candidate is an experienced security professional with strong expertise in identity management, access governance, and enterprise security controls. You should have hands-on experience with IAM platforms, cloud environments, and security compliance practices, combined with strong communication and documentation skills.

• 5+ years of experience in Security Engineering, IAM, Identity Governance, or related cybersecurity roles.
• Strong hands-on experience with SailPoint Identity Security Cloud/IdentityIQ and Okta administration.
• Deep understanding of IAM concepts, including RBAC, ABAC, least-privilege models, and privileged access management.
• Experience implementing and managing secrets management solutions such as AWS Secrets Manager or equivalent platforms.
• Proven ability to validate patch compliance, manage security SLAs, and support remediation processes.
• Strong knowledge of encryption standards, secure communication protocols, and data protection controls.
• Experience supporting Zero Trust architectures and identity-driven security models.
• Familiarity with cloud platforms such as AWS, Azure, or GCP.
• Exposure to compliance frameworks including ISO 27001, SOC 2, PCI-DSS, or NIST.
• Experience working in large-scale or regulated enterprise environments is preferred.
• Excellent documentation, communication, and stakeholder management skills.

Benefits:

• Fully remote work environment with flexibility to work from your preferred location.
• Opportunity to work on enterprise-level cybersecurity and identity management initiatives.
• Exposure to modern IAM platforms, cloud security technologies, and Zero Trust frameworks.
• Opportunity to contribute to security improvements that protect critical business systems.
• Collaborative environment with cross-functional teams across technology and security domains.
• Professional growth opportunities through challenging security projects and continuous learning.
• Competitive compensation package based on experience, skills, and market conditions.