IAM Engineer in Digital Hub Warsaw at Bayer

The Identity and Access Management (IAM) Engineer in the Identity Platforms Engineering team will play a critical role in defining security IAM strategy, setting direction, project consulting, policy and standards creation, and providing secure IAM solutions to protect Bayer’s applications, infrastructure, and intellectual property across the global IT environment. The scope of this position covers identity lifecycle management while incorporating security into all decisions and daily job responsibilities.

Qualifications & Competencies (education, skills, experience):

• Bachelor’s degree in Computer Science, Information Systems, or a related field.
• 5 years of experience in IT with a focus on identity lifecycle, access management, system integration, and entitlements management.
• 5 years of experience in two or more of the following areas:
• Identity Lifecycle
• Access Governance
• Authentication
• Cloud Identity Management
• Customer IAM
• Privileged Access Management
• 3 years of experience with cloud automation tools like AWS CloudFormation or HashiCorp Terraform.
• Proficiency in IAM integration patterns and standards (e.g., SAML, OAuth, OpenID Connect).
• Strong problem-solving abilities with a knack for complex systems.
• Excellent communication skills and ability to convey technical details to a non-technical audience.
• Preferred certifications: CISSP, CISM, CIAM.
• Familiarity with IAM governance frameworks (NIST, ISO 27001, GDPR) is beneficial.

Preferred:

• Experience with one or more IAM platforms (e.g., SailPoint, Savyint, Okta, CyberArk, HashiCorp).
• Solid background in Web Access Management architecture and implementation.
• Certifications: Microsoft SC-, AZ-, SailPoint IdentityNow Engineer.
• Understanding of DevOps practices and tools for IAM operations.
• Skilled in scripting languages like Python and PowerShell for automation.
• Experience with containerization and orchestration tools (Amazon ECS, EKS, Docker, Kubernetes).
• Independent worker and collaborative team player in a dynamic setting.
• Strong leadership and mentoring skills with the ability to manage multiple projects and priorities effectively.

The Identity and Access Management (IAM) Engineer in the Identity Platforms Engineering team will play a critical role in defining security IAM strategy, setting direction, project consulting, policy and standards creation, and providing secure IAM solutions to protect Bayer’s applications, infrastructure, and intellectual property across the global IT environment. The scope of this position covers identity lifecycle management while incorporating security into all decisions and daily job responsibilities.

,[Design and implement IAM solutions leveraging SailPoint IdentityNow and Microsoft Entra ID to secure systems and data., Collaborate with various teams to define requirements, design solutions, and integrate IAM systems with existing applications., Manage user identities, roles, and access permissions across multiple platforms., Develop and enforce IAM policies and procedures to meet security and compliance standards., Perform access reviews, audits, and risk assessments to maintain security integrity., Monitor IAM systems for security issues and respond to incidents proactively., Automate IAM processes to enhance efficiency using scripting and automation tools., Provide expert guidance on IAM issues and lead IAM initiatives., Keep abreast of new IAM technologies and security trends to continually refine our practices., Work closely with security teams during incident responses to mitigate threats., Ensure IAM solutions are aligned with overall IT architecture through cooperation with enterprise architecture teams., Maintain effective communication across teams regarding project status, timelines, and changes.] Вимоги: Degree, IAM, AWS CloudFormation, Terraform, SAML, OAuth, Communication skills, CISSP, CISM, NIST, ISO, GDPR, Okta, HashiCorp, DevOps, Scripting language, Python, PowerShell, ECS, AWS ECS, Amazon EKS, Docker, Kubernetes Бонуси та переваги: Sport subscription, Training budget, Private healthcare.