18 days ago
Paris, FranceSenior
Responsibilities
- Design, implement, integrate, and maintain highly available, secure, and scalable IAM solutions.
- Manage self-hosted and open-source IAM systems and integrate them with internal infrastructure and tools.
- Automate user provisioning, de-provisioning, onboarding, offboarding, and account lifecycle workflows.
- Manage identity governance, access rights, entitlements, compliance alignment, audits, and access re-certification campaigns.
- Configure and optimize authentication, authorization, access controls, and granular IAM policies.
- Write maintainable scripting and infrastructure automation code to reduce operational toil.
- Collaborate with engineering and non-engineering teams on identity and infrastructure projects.
Requirements
- Proven production experience as an IAM Engineer focused on identity management.
- Hands-on experience with open-source IAM solutions such as FreeIPA, Keycloak, and midPoint.
- Deep understanding of LDAP, SAML, OAuth, and OIDC identity protocols and standards.
- Strong Python or Bash scripting skills for automation, integration, and tooling.
- Solid system engineering experience managing, deploying, and maintaining complex self-hosted solutions.
- Ability to adapt quickly and collaborate effectively across technical and non-technical teams.
- Preferred: advanced midPoint implementation, configuration, and maintenance experience.
- Preferred: experience with Ansible, Puppet, identity governance frameworks, compliance reporting, and access re-certification campaigns.
- Preferred: relevant IAM certifications such as CIDPRO.
Benefits
- Stock options and ownership opportunity.
- Health coverage, retirement options, generous leave, and wellness support.
- Learning and development investment with substantial ownership from day one.
- Technology and hardware needed for the role.
- Flexible working hours and primarily in-person collaboration at offices including Geneva, Zürich, Barcelona, and London.
- Office lunches and snacks, plus public transport, bike allowance, or parking support.
- The posting is marked onsite, with compensation locations including Paris and other locations discussed during the interview process.
