7 hours ago
Berlin, Germany +2 moreSenior
Responsibilities
- Operate, architect, and maintain corporate identity providers including Okta, Auth0, and Keycloak.
- Automate Joiner, Mover, and Leaver workflows from the HiBob HRIS and build provisioning connectors for legacy applications.
- Use Python or Go, APIs, Terraform, Ansible, and SaltStack to automate identity operations and manage configurations as code.
- Reduce operational toil and improve system self-healing, predictability, reliability, and scalability.
- Participate in on-call rotations and improve incident response, root cause analysis, and post-mortem processes for authentication failures.
- Collaborate with Security and IT teams to apply security, GDPR, and Zero Trust principles to identity architecture.
Requirements
- At least 6 years of infrastructure development and/or operations experience with a dedicated focus on Identity and Access Management.
- Bachelor’s degree in a relevant field.
- Expertise with a scripting language such as Python.
- Experience with large web applications or computer clusters and complex identity architectures involving Okta, Auth0, and Keycloak.
- Experience integrating HR information systems with identity directories and handling re-hires and cross-border transfers.
- Understanding of network principles and operations and identity protocols including OAuth 2.0, OIDC, SAML, and SCIM.
- Practical knowledge of PKI, S/MIME, X.509, certificate lifecycles, and Active Directory.
- Preferred experience deploying and maintaining databases, Docker, ECS, Linux Containers, Git, KVM, Proxmox, Jenkins, GitLab, access control systems, and CI/CD tooling.
- Preferred experience with production virtual machines, defensive programming, and automated deployment, renewal, and revocation of personal S/MIME certificates.
Benefits
- Full-time hybrid work requiring three days per week in the Berlin, Haarlem, or Ljubljana office.
- Paid time off including vacation, holidays, and company-wide days off.
- Employee Wellness Program.
- Home Office Reimbursement and monthly phone and internet reimbursement.
- Tuition Reimbursement and access to LinkedIn Learning.
- Equity and Volunteering Paid Time Off.