Functie
ROLE CONTEXT
• We are looking for a senior IAM Engineer with strong .NET and Azure experience to
strengthen the team responsible for the backend of our in-house identity
orchestration platform. The profile must bring proven IAM expertise and be able to
guide the implementation of identity governance, provisioning and fine-grained
authorization solutions.
• In this role you maintain and further develop existing .NET components while driving
the move to a modern, cloud-native architecture on Azure. You contribute to IAM-
related evolutions, API security and new Azure-based modules.
DESCRIPTION AND TASKS
• You support and further develop the in-house identity orchestration platform and
take ownership of related analysis, development, maintenance and follow-up.
• You help move existing .NET components toward a cloud-native target architecture
on Azure by understanding the current stack, identifying reusable components, and
translating functional needs into maintainable cloud-ready solutions.
• You design and build new Azure-based IAM functionality from scratch, using
components such as Azure Functions, Azure Container Apps and Azure Key Vault, and
integrate it with REST services and identity providers.
• You support IAM-related development topics such as user provisioning, API security,
token conversion with user context, and identity governance (IGA) changes.
• You follow up IAM-related incidents and support vulnerability management for the
components you own.
• You apply IAM and security engineering expertise to support secure user
management, access control and API integration.
• You provide senior-level input on IAM architecture topics and support the
implementation of the agreed architecture, including the detailed design and
delivery of IAM solutions such as policy-based authorization.
• You design and implement identity lifecycle management and user provisioning
solutions, including integrations with identity providers and SCIM-based flows.
• You design and implement fine-grained authorization using policy engines and
standards such as OPA, OpenFGA or AuthZen, and apply appropriate authorization
models including RBAC, ABAC, ReBAC and PBAC.
• Maintain & implement solutions within the agreed timeline and quality standards.
• Document implementations and changes.
• Support analysts & designers in converting functional specifications into technical
solutions.
• Deliver 3rd-line support.
• You follow technical evolutions and can independently conduct research with the
support of an application architect.
• You understand the technical architecture and re-use existing technical components.
• You assist in scheduled production deployments outside office hours.
PROFILE AND EXPERIENCE
Profile
• Senior IAM engineer with proven, relevant experience and the ability to work
independently in a complex identity and access management environment.
• experience in .NET back-end / back-office development.
• Broad IT knowledge and interests.
• Strong planning skills; you dare to challenge the AS-IS and work result-driven.
• You work accurately and plan meticulously.
• You are solution-oriented, communicative and a real team player.
• You have a hands-on mentality and an eye for quality, and you take initiative to
optimize development processes.
• Comfortable working with distributed, international teams.
• You can work independently in a complex application landscape and bring continuity
to recurring changes.
Required Experience (must-have)
• Proven senior-level experience with Identity & Access Management, including
identity governance and administration, identity lifecycle management and user
provisioning.
• Hands-on experience with identity providers such as Keycloak, Duende IdentityServer
or Microsoft Entra ID.
• Hands-on experience with SCIM, OIDC and OAuth 2.1 for provisioning, authentication
and authorization integrations.
• Experience with fine-grained authorization, including OPA, OpenFGA or AuthZen, and
with authorization models such as RBAC, ABAC, ReBAC or PBAC.
• .NET / C# back-end development.
• Experience with SQL
• REST APIs — designing, building and consuming RESTful services (JSON).
• Experience with CI/CD pipelines in Azure DevOps to deploy solutions across
environments.
• Secure cloud development practices, including Azure Key Vault for sensitive
information.
• Source control with Git.
• Experience with Agile methodology and a DevOps culture.
Nice to Have
• Experience delivering IAM-related development or maintenance in a secure
customer or partner portal environment.
Languages
Dutch – proficient
English – proficient