Identity Management Engineer

B. Braun Melsungen AG; Town of Poland (NY); On-site; USD 41,214 - 52,990; Full time

Benefits offered by this job

Additional social funds for holidays

Multisport card co-funding

Group life insurance

Training and conference funding

Language lessons and e-learning access

Team-building and sports events

Job summary

B. Braun Melsungen AG is seeking an Identity Management Engineer in Poland. The role focuses on developing and maintaining the identity management platform, with emphasis on OneIdentity Manager, CIAM concepts, and secure, scalable backend services.

You will work in a hybrid environment, supporting customer administration, identity lifecycles, and data synchronization across systems, while ensuring compliance with data protection standards and risk assessments.

Qualifications

• Hands-on experience with OneIdentityManager or similar tools.
• Strong understanding of IAM/CIAM concepts, access governance, and lifecycle management.
• Experience with software development and integration for identity services.

Responsibilities

• Develop and maintain the Identity Management Platform.
• Design scalable backend services for customer administration and identity lifecycle processes.
• Implement and extend OneIdentity Manager capabilities and REST API integrations.
• Ensure secure coding, threat modeling, and compliance with DPIA/DSR data policies.
• Provide 2nd/3rd level support for CIAM services and monitor system performance.

Skills

Identity & Access Management

OneIdentityManager

VB.Net

PowerShell

Angular

ReBAC

OpenFGA

System integration

Database design

Job description

You’re an important part of our future. Hopefully, we're also a part of your future! At B. Braun, we protect and improve the health of people worldwide. You support this vision, bringing expertise and sharing innovation, efficiency and sustainability as values. That’s why we would like to keep developing our company with you. Keeping your future in mind, we’re making a joint contribution to health care worldwide, with trust, transparency and appreciation. That's Sharing Expertise.

Identity Management Engineer

Functional Area: Information Technology

Working Model: Hybrid

Requisition ID: 12969

Duties and responsibilities

• Develop and maintain the Identity Management Platform based on OneIdentityManager
• Design and implement scalable backend services for:
• Customer administration
• Identity lifecycle processes (Joiner, Mover, Leaver)
• Build secure, high-performance service layers and processes
• Ensure modular, maintainable, and extensible application design
• Contribute to:
• CIAM strategy and roadmap
• Architecture design and evolution
• Authorization and identity standards
• Secure and scalable system design
• Implement and extend OneIdentity Manager capabilities
• Develop custom synchronization solutions (REST APIs)
• Implement data mapping, transformation, and consistency checks
• Ensure reliable data exchange and synchronization across systems
• Implement logic for license assignment and tracking
• Implement and support threat modeling and risk assessments
• Ensure compliance with: DPIA (Data Protection Impact Assessment), Data retention policies, DSR (Data Subject Rights)
• Enforce secure coding and identity security best practices
• Provide 2nd/3rd level support for CIAM services and applications
• Monitor system performance and troubleshoot issues
• Ensure high availability and reliability of identity services

Required Qualifications

Must-have

• Hands‑on experience with OneIdentityManager or similar
• Strong understanding of Identity & Access Management (IAM / CIAM) concepts, access governance, and identity lifecycle management processes.
• Familiarity with:
• Programming language: (VB.Net)
• Scripting languages (PowerShell)
• Frontend development (Angular)
• Solid understanding of:
• Authorization models, especially ReBAC
• OpenFGA or similar fine‑grained authorization systems
• Experience with:
• Integration and synchronization between systems
• Database design and handling identity data
• Designing and building processes

Nice-to-have

• Event-driven architecture
• GDPR and data privacy regulations
• CI/CD pipelines and DevOps practices
• Familiarity with EMS systems or contract management platforms

Personal Skills

• Strong analytical and conceptual thinking
• High security and quality awareness
• Ability to work in complex, regulated environments
• Strong ownership and proactive mindset
• Good communication skills with technical and business stakeholders

Benefits

• Additional social funds for summer holidays and Christmas
• Co‑funding of a Multisport card and private medical care
• Opportunity to join group life insurance
• Funding for trainings and conferences
• Co‑funding of professional development
• Free language lessons and access to an e‑learning platform
• Team‑building and sports events

Salary ranges: 14.000 - 18.000 PLN gross monthly.

The controller of the personal data contained in your CV and provided when you create an account in our application is B. Braun Business Services Poland Sp. z o.o. in Nowy Tomysl, 14 Tysiąclecia St. We process this data on the basis of Article 22 of the Labour Code, and if you provide us with more data than required by the Labour Code, we process it on the basis of your consent. The purpose of this processing is to consider your application in the recruitment process. To find out more, such as how long we will keep your personal data, you can read the full information clause here: Klauzula Informacyjna dla Kandydatów - Kariera w Naszej Firmie - B. Braun You can contact our Data Protection Officer at any time regarding your personal data: [e-mail] .