IAM & Directory Services Security Architect

We are looking for a visionary Senior/Enterprise IAM Architect to join a project from the logistics industry. You will become part of the Identity and Access Management Team. Following a major organizational integration, your primary mission will be to evaluate existing identity environments, uncover structural vulnerabilities, and steer IT infrastructure toward a mature, audit-ready security posture. This role focuses on methodology, architectural alignment, and long-term governance rather than deploying new tools.

• 10+ years of experience in Identity & Access Management (IAM) or Enterprise Security Architecture in complex, international environments
• Expert-level knowledge of Directory Services Security including Active Directory (forests/trusts, Group Policy, authentication mechanisms) and Microsoft Entra ID (Azure AD)
• Solid understanding of protocols and standards: LDAP/LDAPS, Kerberos, SAML, OAuth 2.0, and OpenID Connect
• Familiarity with security regulations and standards such as ISO 27001, NIS2, and GDPR, with ability to translate them into technical policies
• Fluency in English (written and spoken) with strong communication skills

Nice to have:

• Hands-on familiarity with enterprise-class PAM/IGA solutions (especially CyberArk)
• Solid understanding of the broader Microsoft Security Stack
• Recognized industry certifications: CISSP, CISM, TOGAF, SABSA, or Microsoft-specific certifications (SC-100, SC-300, AZ-500)
• Language skills in German

• Conduct deep-dive architectural reviews of Active Directory and Microsoft Entra ID environments to identify legacy risks, structural gaps, and configuration baselines
• Design, implement, and maintain enterprise-wide IAM/PAM governance frameworks, security standards, and reference architecture blueprints
• Establish modern identity control requirements including advanced authentication methods such as MFA, passwordless, and Conditional Access, as well as privileged access standards like PAM, admin tiering, and just-in-time access
• Author conceptual documentation, decision records, and technical diagrams to guide engineering and delivery teams
• Lead workshops and communicate complex architectural risks and strategic roadmaps to technical teams and business leadership

Candidate must be based in Europe; work mode is 100% remote with sporadic travel to Hamburg for strategy workshops and team alignment.