Job
- Level
- Experienced
- Job Field
- IT, Application, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Kassel, Berlin, Dusseldorf, Kiel, Südheide, Bremen
- Working Model
- Hybrid, Onsite
Job Summary
In this role, you design secure hybrid identity architectures, integrate enterprise applications, implement zero-trust principles, and develop security concepts for cloud identities and access management.
Job Technologies
Your role in the team
- Architecture & Strategy: Design, further development, and strategic alignment of a secure, scalable hybrid identity and cloud architecture based on Microsoft Entra ID as well as traditional Active Directory structures.
- Solution Design & App Integration: Technical conception and securing of enterprise applications and cloud services, including the design of modern Single Sign-On (SSO) solutions (SAML 2.0, OpenID Connect / OAuth 2.0) and API security concepts.
- Cloud Security & Zero Trust: Definition and implementation of Zero Trust architecture principles, strengthening access permissions through Conditional Access, phishing-resistant MFA (FIDO2), as well as Entra ID Governance / PIM.
- Identity Protection & Workloads: Proactive design of security concepts to protect user identities, service principals, and managed identities, as well as integration into SIEM/SOAR and threat detection systems.
- Technical Consulting & Roadmap: Evaluation of technological trends, creation of technical blueprints and standards, as well as advising project teams, business units, and IT management in the IAM environment.
This text has been machine translated. Show original
Our expectations of you
Education
- Completed degree in Computer Science, Business Informatics, or a comparable qualification in the IT field.
Qualifications
- Deep protocol expertise: Specialized knowledge of modern identity and authentication protocols (OAuth 2.0, OpenID Connect, SAML 2.0, SCIM) as well as traditional directory services (Kerberos, LDAP).
- Security Mindset & Standards: Deep understanding of Zero-Trust frameworks, tiering models, workload identities, and measures against lateral movement in cloud and hybrid environments.
- Analytical strength & leadership: The ability to clearly document and present highly complex technical IAM architectures, and to act as a technical sparring partner and mentor for engineering teams.
Experience
- Solid architecture experience: Several years of proven practice in designing and architecting complex cloud identity environments (Microsoft Entra ID / Azure AD) and hybrid identity infrastructures.
- Interface & Integration Knowledge: Experience in connecting IGA, PAM, and SIEM systems to the Microsoft Entra platform as well as in utilizing Microsoft Graph API and automation (PowerShell / Terraform / Bicep).
This text has been machine translated. Show original
What we offer
- At our locations, we offer you: Attractive compensation.
- Flexible working hours and remote work.
- Company pension scheme.
- Fitness and health offerings.
- Bike leasing.
- Corporate Benefits Platform.
- Germany Ticket as a job ticket.
- Individual and diverse external and internal development opportunities, including the Rheinmetall Academy and an e-learning platform.
- Professional onboarding process supported by a digital onboarding tool.
This text has been machine translated. Show original
Benefits
Higher Take-Home Pay
Health, Fitness & Fun
Work-Life-Integration
Food & Drink
Topics You Will Work On
Job Locations
About Your Employer
Rheinmetall AG
We are the driving force behind the automotive and defense industries. Through our innovative strength and technological expertise, we lead both sectors. We are now systematically building on our strength to achieve our goal.
Description
- Company Type
- Established Company
- Working Model
- Full Remote, Hybrid, Onsite
- Industry
- Vehicle Manufacturing, Supplier, Industry, Production
Employer reviews
by devworkplaces.com
Total
(1 Review)3.5
Engineering
3.0Workingconditions
4.0Culture
3.6Career Growth
3.6
Solution Architect Cloud Identity & Access Solutions
- Location
- Kassel, Berlin, Dusseldorf, Kiel, Südheide, Bremen
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
