IAM Architect - Identity & Access Management (m/f/d)

Ubicación Madrid (híbrido) WELCOME TO OUR TEAM If you're someone who inspires others, owns their impact and wants to elevate what they do, you'll fit right in. Until July 1, our business was part of BASF. As part of the current transition, all job listings and the application process are still hosted on the BASF platform and therefore fully presented in BASF branding. Please do not be confused by this: All roles are positions at Surventis, and your application will be submitted to us. At Surventis, we go beyond the surface - in everything we do. We put customers at the center, think one step ahead, and develop solutions that create real value and lasting partnerships. We inspire each other to think further, take ownership of our work, and constantly push to elevate what's possible. If you bring your full self, challenge the obvious answer, and want to grow with a team that means it - this is your place. WHAT YOU CAN EXPECT As an IAM Architect, you are responsible for designing, evolving, and ensuring the effective implementation of our global Identity & Access Management (IAM) landscape. You combine strategic architecture ownership with hands-on expertise, acting as the IT-Infrastructure key interface between internal teams (esp. Cybersecurity, SAP, Applications, business units) and Managed Service Providers (MSP). In cooperation with the MSP, you ensure that IAM solutions are secure, scalable, and aligned with business and compliance requirements. You will take ownership across the following IAM domains: Entra ID / Azure AD, Access Governance, SSO, MFA, PIM/PAM, Joiner–Leaver–Mover Integration, Password Management Vault, PKI & Key Management. Your key responsibilities include: Define and evolve the global IAM strategy together with security and infrastructure experts Design end-to-end IAM architecture across all identity lifecycle processes (Joiner–Mover–Leaver) Act as professional counterpart towards MSPs: steer and govern external service delivery Ensure stable, secure, and compliant IAM operations as well as integration with enterprise architecture (I&O Platform, applications, cloud) Provide hands-on expertise in solution design, integrations, and complex troubleshooting scenarios Support and advise projects and business stakeholders on IAM-related topics WHAT YOU OFFER Degree in computer science, business informatics, or comparable qualification Several years of practical experience in IAM, ideally in an international industrial environment with strong SAP footprint Broad expertise as an IAM generalist across multiple domains Hands-on experience across core IAM domains, leveraging solutions such as Entra ID, SailPoint, CyberArk, SuccessFactors & ServiceNow, Keeper and DigiCert Strong expertise in: Microsoft Entra ID / Azure AD Identity Governance solutions (e.g., SailPoint, One Identity) Authentication protocols (SAML, OAuth, OpenID Connect) …