Job
- Level
- Senior
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Ismaning
- Working Model
- Hybrid, Onsite
Job Summary
In this role, you will own the IAM strategy for Entra ID and Active Directory, manage identity lifecycle governance, and implement security controls across various environments while conducting threat analyses to support SOC investigations.
Job Technologies
Your role in the team
- Own IAM strategy across Entra ID and Active Directory.
- Manage conditional access, PIM/PAM, and identity lifecycle governance.
- Develop identity-centric detections and threat-hunting workflows, analyzing Entra ID logs and privilege escalation paths in alignment with the SOC.
- Partner with Infrastructure, Client Services, and Cloud Admin teams to review and implement controls across endpoint, email, network, and cloud environments.
- Act as internal advisor for Splunk Cloud SIEM and Cribl Stream/Edge, partnering with the MSSP on detection engineering and optimization.
- Oversee vulnerability management and quality-assure penetration tests.
- Serve as senior escalation point for complex SOC investigations.
- Mentor SOC analysts and junior engineers.
- Contribute to the long-term security roadmap.
- Keep leadership informed on risks and developments and maintain clear architecture and process documentation.
This text has been machine translated. Show original
Our expectations of you
Education
- Bachelor's degree in IT Security, Cyber Security, or comparable qualification (or equivalent practical experience).
Qualifications
- Deep expertise in Entra ID, Active Directory, MFA/passwordless, SSO protocols (SAML, OIDC, SCIM), and identity governance.
- Strong foundation in zero-trust architecture and frameworks such as NIST, ISO 27001, or MITRE ATT&CK.
- Working knowledge of Splunk Cloud SIEM, CyberArk, SailPoint IdentityIQ, and Cribl Stream/Edge.
- Vertrautheit mit AWS, Proofpoint und Zscaler/Cisco/FortiGate.
- Proficiency in PowerShell, Python, or Microsoft Graph API.
- Very good English communication skills (German desirable).
- Certifications such as Microsoft SC-300, SC-100, AZ-500, CISSP, CIDPRO, AWS Security Specialty, GIAC (GCIH, GCIA, GCFA), or Splunk/Cribl are considered a plus.
Experience
- 5+ years in IT security engineering or operations, with significant hands-on IAM responsibility.
This text has been machine translated. Show original
What we offer
- Growth is important to us, that's why we support your personal and professional development.
- A working environment based on trust, encouragement and constructive feedback.
- Collaboration with people from different countries and cultures.
- 32 days of annual leave plus 2 days off.
- Flexible working hours and home office policy (approx. 60% possible).
- Attractive employee conditions for car insurance.
- Exceptional company benefits: Employer subsidy for occupational pension scheme and disability pension, supplementary company health insurance, capital-forming benefits.
- Optional: Job ticket, car parking spaces, monthly travel allowance.
- EGYM Wellpass.
- Financial subsidy as a small wish-fulfiller.
- Free coffee, tea, water and weekly fruit delivery.
- Health management and pme family service.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Topics that you deal with on the job
Job Locations
This is your employer
AND-E
AND-E is an innovative insurance company headquartered in Ismaning near Munich. As part of the MS&AD Group Holding, it ranks among the largest insurance groups in the world and employs 250 staff in Germany. The company is recognized as one of the leading telematics providers in Europe and collaborates closely with the Toyota and Lexus organization.
Description
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Banking, Finance, Insurance
Senior Security Engineer IAM
- Location
- Ismaning
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
