IAM Engineer

Functie

ROLE CONTEXT

• We are looking for a senior IAM Engineer with strong .NET and Azure experience to
• strengthen the team responsible for the backend of our in-house identity orchestration platform. The profile must bring proven IAM expertise and be able to guide the implementation of identity governance, provisioning and fine-grained authorization solutions.
• In this role you maintain and further develop existing .NET components while driving the move to a modern, cloud-native architecture on Azure. You contribute to IAM-related evolutions, API security and new Azure-based modules.

DESCRIPTION AND TASKS

• You support and further develop the in-house identity orchestration platform and take ownership of related analysis, development, maintenance and follow-up.
• You help move existing .NET components toward a cloud-native target architecture on Azure by understanding the current stack, identifying reusable components, and translating functional needs into maintainable cloud-ready solutions.
• You design and build new Azure-based IAM functionality from scratch, using components such as Azure Functions, Azure Container Apps and Azure Key Vault, and integrate it with REST services and identity providers.
• You support IAM-related development topics such as user provisioning, API security, token conversion with user context, and identity governance (IGA) changes.
• You follow up IAM-related incidents and support vulnerability management for the components you own.
• You apply IAM and security engineering expertise to support secure user management, access control and API integration.
• You provide senior-level input on IAM architecture topics and support the implementation of the agreed architecture, including the detailed design and delivery of IAM solutions such as policy-based authorization.
• You design and implement identity lifecycle management and user provisioning solutions, including integrations with identity providers and SCIM-based flows.
• You design and implement fine-grained authorization using policy engines and standards such as OPA, OpenFGA or AuthZen, and apply appropriate authorization models including RBAC, ABAC, ReBAC and PBAC.
• Maintain & implement solutions within the agreed timeline and quality standards.
• Document implementations and changes.
• Support analysts & designers in converting functional specifications into technical solutions.
• Deliver 3rd-line support.
• You follow technical evolutions and can independently conduct research with the support of an application architect.
• You understand the technical architecture and re-use existing technical components.
• You assist in scheduled production deployments outside office hours.

PROFILE AND EXPERIENCE

Profile

• Senior IAM engineer with proven, relevant experience and the ability to work independently in a complex identity and access management environment.
• experience in .NET back-end / back-office development.
• Broad IT knowledge and interests.
• Strong planning skills; you dare to challenge the AS-IS and work result-driven.
• You work accurately and plan meticulously.
• You are solution-oriented, communicative and a real team player.
• You have a hands-on mentality and an eye for quality, and you take initiative to optimize development processes.
• Comfortable working with distributed, international teams.
• You can work independently in a complex application landscape and bring continuity to recurring changes.

Required Experience (must-have)

• Proven senior-level experience with Identity & Access Management, including identity governance and administration, identity lifecycle management and user provisioning.
• Hands‑on experience with identity providers such as Keycloak, Duende IdentityServer or Microsoft Entra ID.
• Hands‑on experience with SCIM, OIDC and OAuth 2.1 for provisioning, authentication and authorization integrations.
• Experience with fine‑grained authorization, including OPA, OpenFGA or AuthZen, and with authorization models such as RBAC, ABAC, ReBAC or PBAC.
• .NET / C# back-end development.
• Experience with SQL
• REST APIs — designing, building and consuming RESTful services (JSON).
• Experience with CI/CD pipelines in Azure DevOps to deploy solutions across environments.
• Secure cloud development practices, including Azure Key Vault for sensitive information.
• Source control with Git.
• Experience with Agile methodology and a DevOps culture.

Nice to Have

• Experience delivering IAM-related development or maintenance in a secure customer or partner portal environment.

Languages

• Dut