Position: Identity and Access Management Engineer
Company: K&C
Experience required: 5y
English level: upper

K&C is recruiting for a remote role to work on the digital evolution of Germany’s market leader in adventure activities, experience gifts and tourism, part of a major Frankfurt-listed group.

Take your career onwards and upwards thanks your experience and technical know-how in cutting edge identity and access management, professional qualities and personality, regardless of where you happen to be based!

The group is expanding quickly with new brands and verticals including a tour operator, leisure community, a booking platform and new SaaS product. 

**Your role and responsibilities:**

- Design and engineer a modern identity and access management solution for external (B2B/B2C) and internal actors.
- Collaborate on technical IAM solution designs with product owners and developers.
- Develop and provide a robust cloud-native IAM platform to power our digital services.
- Plan implementation and operation of cloud-native identity providers with AWS Cognito and Azure AD as first-class citizens.
- Solve authentication and authorization for internal microservice communication.
- Guide developers through IAM concepts during implementation with reviews and workshops.
- Establish best practices and a high level of standardization for several projects and stakeholders.
- Leverage state-of-the-art technologies such as containerized applications run in Kubernetes clusters and connected via Istio service meshes.

**Requirements:**

- Deep understanding of multi-actor and multi-device IAM architectures and processes
- Experience with web-native IAM standards OAuth 2.0, OIDC, JWT
- Experience with technical solution design and UML/BPMN modeling
- Expertise in applying cryptographic encryption, signature, and certificate mechanisms
- Experience in the architecture of distributed applications (microservices, self-contained systems)
- Experience with AWS or other cloud providers
- Knowledge of Kubernetes, Istio and cloud-native concepts
- Agile mindset and solution-driven way of thinking
- Passion for knowledge sharing and willingness to mentor other team members in best practices, code quality, and tech frameworks

**Required skills:**

- Kubernetes – 3 years
- OAuth – 2 years
- Amazon AWS – 3 years
- AWS Cognito – 2 years
- Terraform – 2 years
- Identity Access Management – 3 years
- Experience in AgileDevOps – 2 years
- Experience in Go(lang) will be a plus
- English – proficient

**Applied concepts**

Agile mindset, DevOps – You build it, you run it. – Infrastructure as Code – Continuous Deployment – 12-Factor App – Self-contained Systems – Domain-Driven Design (DDD) – Behavior Driven Development (BDD) – Test-Driven Development (TDD) – Event-driven Architecture – Self-contained Systems – Hexagonal Architecture – Micro Frontends – CI / CD – Contract First – GitOps – federated Single-Sign-On

**Customer tech stack**

Kubernetes – Docker – Terraform – Helm – FluxCD – AWS – Azure AD – Oathkeeper – AWS Cognito – AWS EKS – Istio – Golang – Prometheus – Grafana – PagerDuty – Uptrends – Fluentd – CloudWatch – Apache Kafka (AWS MSK) – PostgreSQL/MariaDB (AWS RDS) – Jaeger distributed tracing – Elastic Search – NodeJS/NestJS – ReactJS – PHP7/Symfony4 – Jenkins – and many more..