Identity & Access Management (IAM) Support Engineer (m/f/d)

Role overview

Provide second- and third-level support for enterprise identity and access platforms, keeping their services reliable and resolving operational issues. Depending on your background, the work may focus on identity lifecycle management, access management, or privileged access management.

Responsibilities

- Operate IAM, access management, or privileged access management platforms and investigate incidents involving provisioning, credentials, integrations, or system health. - Maintain user lifecycle processes, directory services, authentication and federation; or manage access policies and authentication flows; or administer privileged accounts, vault policies, sessions, and just-in-time access. - Monitor connectors, workflows, and integrations with directories, HR systems, applications, IT service management, and security monitoring tools. - Analyze identity data, prepare reports, and support automation with databases and scripts. - Implement patches and service improvements through change management, and keep runbooks and support documentation current. - Work with customer security and operations teams to improve platform processes.

Requirements

- A degree in computer science or information security, or equivalent practical experience. - Hands-on experience operating IAM, access management, or privileged access management services. - Familiarity with Active Directory, LDAP, SAML, SCIM, OAuth/OIDC, and related integrations. - Strong troubleshooting skills, including working with logs, APIs, and relational databases. - Understanding of least privilege, zero trust, and compliance needs. - Fluent English and strong analytical and communication skills.

Nice to have

- Scripting experience with PowerShell or Python, and relevant IAM, access management, or PAM certifications. - Experience with platforms such as SailPoint, One Identity, Omada, Saviynt, Ping Identity, ForgeRock, CyberArk, Delinea, BeyondTrust, or HashiCorp Vault. - Exposure to cloud identity services such as Entra ID, AWS, or Google Cloud; German is an advantage.

Benefits and work setup

- Bulgaria-based role, with remote or hybrid options in Sofia, Plovdiv, or Varna. - Listed benefits include flexible hours, remote work, 25 days of annual leave, private health insurance, a company mobile phone, and food vouchers; availability may depend on location and working arrangements.