2 months ago
Madrid, SpainSenior
Responsibilities
- Own and drive the authenticator ecosystem, including Smartcard Management, Smartcards, Windows Hello for Business and FIDO2.
- Advance phishing-resistant and passwordless authentication as part of BASF’s global Identity Security strategy.
- Define technical roadmaps and influence authentication architecture, standards and platform capabilities.
- Design, implement, configure, integrate, optimize and operate enterprise authentication solutions.
- Manage platform administration, upgrades, rollouts, vulnerability remediation and lifecycle activities.
- Lead troubleshooting for complex technical issues and major incidents, including root cause analysis and sustainable improvements.
- Act as the technical expert for certificate-based authentication, authenticator lifecycle management and modern MFA technologies.
- Collaborate with product, architecture, cyber security, infrastructure and business stakeholders.
- Manage technical relationships with vendors and service providers.
- Evaluate emerging technologies including passkeys, post-quantum cryptography and AI-supported operations.
- Mentor junior team members and contribute to agile delivery processes.
Requirements
- Bachelor’s or master’s degree in computer science, Cyber Security or a comparable qualification, or equivalent professional experience.
- 7+ years of experience in IT, Cyber Security, IAM or authentication-related domains.
- Strong expertise in Smartcards, FIDO2, Windows Hello for Business, MFA and certificate-based authentication.
- Solid understanding of PKI, certificates and public/private key cryptography.
- Proven hands-on experience implementing, operating and troubleshooting enterprise authentication solutions.
- Experience with enterprise-scale authentication architectures and business-critical security services.
- Strong knowledge of Windows client/server environments and backend technologies, including SQL.
- Experience managing complex technical issues and major incidents.
- Experience driving technical roadmaps, service evolution or architecture improvements.
- Familiarity with agile ways of working and Azure DevOps.
- Experience with IAM platforms, SSO and federation technologies such as Entra ID is preferred.
- Knowledge of Zero Trust architecture, modern identity security, automation, scripting, Infrastructure-as-Code, AI-supported operations and regulatory or compliance requirements is preferred.
- Strong communication, collaboration, stakeholder management and independent ownership skills.
- Excellent written and spoken English.
Benefits
- Flexible work schedule and home-office options.
- Learning and development opportunities.
- 25 holiday days per year plus 5 additional readjustment days.
- Collaborative, trustful and innovative work environment.
- International team and global project opportunities.
- Relocation assistance to Madrid.
- Secure work environment prioritizing health, safety and wellbeing.
About BASF SE
BASF SE is a public chemical manufacturer that produces basic chemicals, advanced materials, surface technologies, and agricultural solutions for customers in industries such as automotive, construction, and consumer goods, as well as farmers. It sells globally through a portfolio of business segments and R&D-driven product lines. Founded in 1865 and headquartered in Ludwigshafen, Germany, BASF is listed on the Frankfurt Stock Exchange.