<div> <div> The Identity Management Engineer is responsible for designing, developing, and operating the B. Braun Customer Identity and Access Management (CIAM) platform. The role focuses on building secure backend services and authorization models using One Identity Manager. This includes implementing identity lifecycle processes, integration with custom APIs, and ensuring compliance with security, governance, and regulatory requirements. </div> <div> Duties and responsibilities: <ul> <li>Develop and maintain the Identity Management Platform based on One Identity Manager </li> </ul> <ul> <li>Design and implement scalable backend services for: </li> </ul> <ul> <li style="list-style-type:none"> <ul style="list-style-type:circle"> <li>Customer administration </li> <li>Identity lifecycle processes (Joiner, Mover, Leaver) </li> </ul> </li> </ul> <ul> <li>Build secure, high-performance service layers and processes </li> </ul> <ul> <li>Ensure modular, maintainable, and extensible application design </li> </ul> <ul> <li>Contribute to: </li> </ul> <ul> <li style="list-style-type:none"> <ul style="list-style-type:circle"> <li>CIAM strategy and roadmap </li> <li>Architecture design and evolution </li> </ul> </li> </ul> <ul> <li>Collaborate in defining: </li> </ul> <ul> <li style="list-style-type:none"> <ul style="list-style-type:circle"> <li>Authorization and identity standards </li> <li>Secure and scalable system design </li> </ul> </li> </ul> <ul> <li>Implement and extend One Identity Manager capabilities </li> </ul> <ul> <li>Develop custom synchronization solutions (REST APIs) </li> </ul> <ul> <li>Implement data mapping, transformation, and consistency checks </li> </ul> <ul> <li>Ensure reliable data exchange and synchronization across systems </li> </ul> <ul> <li>Implement logic for license assignment and tracking </li> </ul> <ul> <li>Implement and support threat modeling and risk assessments </li> </ul> <ul> <li>Ensure compliance with: DPIA (Data Protection Impact Assessment), Data retention policies, DSR (Data Subject Rights) </li> </ul> <ul> <li>Enforce secure coding and identity security best practices </li> </ul> <ul> <li>Provide 2nd/3rd level support for CIAM services and applications </li> </ul> <ul> <li>Monitor system performance and troubleshoot issues </li> </ul> <ul> <li>Ensure high availability and reliability of identity services </li> </ul> Required Qualifications Must-have <ul> <li>Hands-on experience with One Identity Manager or similar </li> </ul> <ul> <li>Strong understanding of Identity & Access Management (IAM / CIAM) concepts, access governance, and identity lifecycle management processes. </li> </ul> <ul> <li>Familiarity with: </li> </ul> <ul> <li style="list-style-type:none"> <ul style="list-style-type:circle"> <li>Programming language: (VB.Net) </li> <li>Scripting languages (PowerShell) </li> <li>Frontend development (Angular) </li> </ul> </li> </ul> <ul> <li>Solid understanding of: </li> </ul> <ul> <li style="list-style-type:none"> <ul style="list-style-type:circle"> <li>Authorization models, especially ReBAC </li> <li>OpenFGA or similar fine-grained authorization systems </li> </ul> </li> </ul> <ul> <li>Experience with: </li> </ul> <ul> <li style="list-style-type:none"> <ul style="list-style-type:circle"> <li>Integration and synchronization between systems </li> <li>Database design and handling identity data </li> <li>Designing and building processes </li> </ul> </li> </ul> Nice-to-have <ul> <li>Experience with: </li> </ul> <ul> <li style="list-style-type:none"> <ul style="list-style-type:circle"> <li>Azure cloud services </li> <li>Event-driven architecture </li> </ul> </li> </ul> <ul> <li>Understanding of: </li> </ul> <ul> <li style="list-style-type:none"> <ul style="list-style-type:circle"> <li>GDPR and data privacy regulations </li> <li>CI/CD pipelines and DevOps practices </li> </ul> </li> </ul> <ul> <li>Familiarity with EMS systems or contract management platforms </li> </ul> <ul> <li>Backend development skills (e.g., C#, .NET, Java) </li> </ul> <ul> <li>Experience with: </li> </ul> <ul> <li style="list-style-type:none"> <ul style="list-style-type:circle"> <li>API development (REST) </li> <li>Authentication protocols (OAuth2, OpenID Connect) </li> </ul> </li> </ul> Personal Skills <ul> <li>Strong analytical and conceptual thinking </li> </ul> <ul> <li>High security and quality awareness </li> </ul> <ul> <li>Ability to work in complex, regulated environments </li> </ul> <ul> <li>Strong ownership and proactive mindset </li> </ul> <ul> <li>Good communication skills with technical and business stakeholders </li> </ul> Benefits: <ul type="disc"> <li>Additional social funds for summer holidays and Christmas</li> <li>Co-funding of a Multisport card and private medical care</li> <li>Opportunity to join group life insurance</li> <li>Fundings for trainings and conferences</li> <li>Co-funding of professional development</li> <li>Free language lessons and access to an e-learning platform</li> <li>Team-building and sports events </li> </ul> Salary ranges: 14.000 - 18.000 PLN gross monthly. Administratorem danych osobowych wskazanych w CV oraz przekazanych przy zakładaniu konta w naszej aplikacji, jest B. Braun Business Services Poland Sp. z o.o. w Nowym Tomyślu przy ul. Tysiąclecia 14. Przetwarzamy te dane na podstawie art. 22 Kodeksu Pracy, a jeśli przekazujesz nam więcej danych, niż wymaga tego Kodeks Pracy, to będziemy je przetwarzać na podstawie Twojej zgody. Celem tego przetwarzania jest rozpatrzenie Twojej kandydatury w procesie rekrutacji.Aby dowiedzieć się więcej, na przykład jak długo będziemy przechowywać dane, możesz zapoznać się z pełną klauzulą informacyjną tutaj: <a title="https://www.bbraun.pl/pl/o-nas/firma/bbbs/kariera-w-bbbs/klauzula-informacyjna-dla-kandydata.html" href="https://www.bbraun.pl/pl/o-nas/firma/bbbs/kariera-w-bbbs/klauzula-informacyjna-dla-kandydata.html" target="_blank" rel="noopener">Klauzula Informacyjna dla Kandydatów - Kariera w Naszej Firmie - B. Braun. </a>Zawsze możesz skontaktować się w sprawie Twoich danych osobowych z naszym Inspektorem Ochrony Danych Osobowych: <a title="mailto:[email protected]" href="mailto:[email protected]" target="_blank" rel="noopener">[email protected]</a>. </div> </div>

Identity Management Engineer (Poznan, PL) @ B. Braun Melsungen AG

About this role

Ready to apply?