1 day ago
Berlin, GermanySenior
Responsibilities
- Operate, architect, and maintain Planet’s internal IT systems and identity providers, specifically Okta, Auth0, and Keycloak.
- Engineer automated Joiner, Mover, and Leaver workflows from HRIS platforms such as HiBob.
- Use Python or Go to automate tasks, build provisioning connectors, and enforce identity data minimization.
- Reduce operational toil by creating self-healing and predictable systems.
- Manage identity-platform configurations as code using APIs, Terraform, Ansible, or SaltStack.
- Participate in on-call rotations and improve incident response, root cause analysis, and post-mortem processes for authentication failures.
- Collaborate with Security and IT teams to implement reliable, scalable, secure, GDPR-compliant, and Zero Trust identity architecture.
Requirements
- At least 6 years of experience in infrastructure development and/or operations with a dedicated Identity and Access Management focus.
- Bachelor’s degree in a related field or equivalent professional experience.
- Expertise with a scripting language such as Python.
- Experience with large web applications or computer clusters and complex identity architectures using Okta, Auth0, and Keycloak.
- Experience integrating HR Information Systems with identity directories and handling re-hires and cross-border transfers.
- Understanding of network principles and operations and identity protocols including OAuth 2.0, OIDC, SAML, and SCIM.
- Practical understanding of PKI, S/MIME and X.509 certificate lifecycles, and Active Directory.
- Preferred experience deploying and maintaining databases, Docker, ECS, Linux Containers, Git, virtual machines, KVM, Proxmox, Jenkins, GitLab, access-control systems, and CI/CD processes.
- Preferred experience with PKI deployment automation and the renewal and revocation of personal S/MIME certificates.
Benefits
- Full-time hybrid work requiring three days per week in the Berlin, Haarlem, or Ljubljana office.
- Paid time off including vacation, holidays, and company-wide days off.
- Employee Wellness Program.
- Home office reimbursement.
- Monthly phone and internet reimbursement.
- Tuition reimbursement and access to LinkedIn Learning.
- Equity and volunteering paid time off.