Certified IAM / IGA Solution Architect (m/f/d) - remote and Bonn

At least 7 years of experience in the design, evaluation, or implementation of IAM/IGA architectures. This experience must specifically include HR as the primary identity source, the identity lifecycle, joiner-mover-leaver processes, provisioning, reconciliation, attribute mapping, and target system integration. Minimum 7 years of experience with HR data feeds, delta and full imports, data validation, duplicate checking, identity correlation, threshold logic, error handling, quarantine, restart and controlled transfer of identity data. At least 7 years of experience with professional or technical data quality, attribute normalization, staging concepts, plausibility checks, rule sets, data control mechanisms or operational master data processes. At least 3 years of experience with architectures for systems with limited or non-permanent connectivity, offline capability, local autonomy, restart, conflict handling, or synchronization-based operating models. At least 6 years of experience with federated identity provider architectures, SAML, OIDC, OAuth2, Keycloak or comparable IdP components, as well as cloud integration of identity services. At least 3 years of experience in evaluating IAM, integration, or data architectures from a security perspective. This includes access control, logging, integrity, data protection, data minimization, role-based access control (Role or Rights Concepts), and auditability. At least 7 years of experience in creating target images, architecture variants, evaluation matrices, risk or benefit assessments and manageable decision templates for complex IT architectures. At least 6 years of experience in product-neutral evaluation of IT architectures, products, or solution options. The candidate must be able to separate requirements and architectural principles from vendor-specific solution claims.