Senior Customer IAM Engineer

Senior Customer IAM Engineer
What we achieve together
As a Senior Customer IAM Engineer, you and your team will take ownership of the customer identity (CIAM) platform and drive the migration from Keycloak to a modern, off-the-shelf market solution to enhance security, availability, and scalability:
– Architecture & Capabilities: Design and configure modern identity features including MFA, SSO, Social Login, identity federation, passwordless authentication, and consent management.
– Support & Standardization: Define reusable integration patterns (OAuth2, OIDC, SAML, SCIM) and collaborate closely with application teams to migrate their integrations, standardizing tokens and authentication flows.
– Advanced Security: Implement and evolve security controls such as bot protection, adaptive authentication, rate limiting, breached credential detection, and account takeover (ATO) protection.
– Operations & Quality (SRE): Build monitoring, alerting, and runbooks to guarantee high SLA readiness, while ensuring smooth integration with surrounding systems like CRM, customer profile services, and APIs.
– Operating Model: Advance platform governance and documentation, manage vendor support interactions, and roll out delegated administration (self-service) for development teams.
– Qualification: You have a degree in Computer Science or a comparable qualification.
– Experience: You bring more than five years of professional experience as a Software Developer.
– Know-how and skills: You are experienced in developing Java web services based on JEE and Spring using REST architectures and have solid knowledge of Identity and Access Management, including Keycloak, OAuth and OpenID Connect.
– Nice to have: Experience with Kotlin, cloud-based software development lifecycle, Kubernetes, CI/CD pipelines and GitOps will support your success in this role.
– Personality: You are familiar with agile development methods and modern architectural patterns, combined with an open, reliable and collaborative mindset.
– Language skills: Your business-fluent English enables you to communicate confidently with developers, stakeholders and product owners.
– Flexible work model: adjustable starting times (7:30 – 9:00AM), hybrid work 70/30, and up to 30 days of remote work from abroad from selected countries.
– Health & Wellness support: private medical care (Medicover), sports card subsidy (Multisport), group insurance (Warta), and ergonomic office spaces.
– Time off & balance: additional paid 2 days off and subsidies for recreation.
– Financial perks: up to 30% discount on company products, support for commuting and eyewear.
– Growth & Development: access to internal training, mentoring programs, self-learning platform for languages (eTutor) and international projects.
– Culture & Community: company events, family friendly activities, and open opportunities within Vaillant Group.
We take care of a better climate. In every home and our environment. As a successful family business, we have been living up to this claim for over 150 years. We are one of the world's leading providers of heat pumps, digital services and efficient gas heating appliances and offer energy-saving solutions.
You will find sustainability everywhere at the Vaillant Group. In the office, at the production sites and on the road. Around 16,000 employees from over 70 countries are committed to this every day. As an international team, we take responsibility - for our future and that of our planet. We promote your personal development so that you can act with passion and together we can ensure a better climate.
Become part of the Vaillant Group and help us shape the future of heating!