Senior Security Engineer IAM (m/f/d)

Salary: 48.000 - 88.000 € per year

Requirements:

Bachelors degree in IT Security, Cyber Security, or comparable qualification (or equivalent practical experience).

5+ years in IT security engineering or operations, with significant hands-on IAM responsibility.

Deep expertise in Entra ID, Active Directory, MFA/passwordless, SSO protocols (SAML, OIDC, SCIM), and identity governance.

Strong foundation in zero-trust architecture and frameworks such as NIST, ISO 27001, or MITRE ATT&CK.

Working knowledge of Splunk Cloud SIEM, CyberArk, SailPoint IdentityIQ, and Cribl Stream/Edge.

Familiarity with AWS, Proofpoint, and Zscaler/Cisco/FortiGate.

Proficiency in PowerShell, Python, or Microsoft Graph API.

Very good English communication skills; German is desirable.

Certifications such as Microsoft SC-300, SC-100, AZ-500, CISSP, CIDPRO, AWS Security Specialty, GIAC (GCIH, GCIA, GCFA), or Splunk/Cribl are considered a plus.

Responsibilities:

Own IAM strategy across Entra ID and Active Directory.

Manage conditional access, PIM/PAM, and identity lifecycle governance.

Develop identity-centric detections and threat-hunting workflows, analyzing Entra ID logs and privilege escalation paths in alignment with the SOC.

Partner with Infrastructure, Client Services, and Cloud Admin teams to review and implement controls across endpoint, email, network, and cloud environments.

Act as internal advisor for Splunk Cloud SIEM and Cribl Stream/Edge, partnering with the MSSP on detection engineering and optimization.

Oversee vulnerability management and quality-assure penetration tests.

Serve as senior escalation point for complex SOC investigations.

Mentor SOC analysts and junior engineers.

Contribute to the long-term security roadmap.

Keep leadership informed on risks and developments and maintain clear architecture and process documentation.

Technologies:

API

AWS

Active Directory

Cloud

Cisco

FortiGate

IAM

IdentityIQ

Support

Network

PowerShell

Python

SAML

Security

Splunk

More:

At AND-E, were redefining the future of mobility insurance. As part of the global MS&AD Group and in close partnership with Toyota, we aim to make tomorrows journeys simpler, safer, and smarter. Our expertise spans more than 30 markets in Europe and South Africa, providing tailored insurance solutions for Toyota and Lexus customers and various white-label partners. In Germany, our offerings include motor insurance, commercial fleet coverage, payment protection insurance, and support for Japanese businesses operating abroad. We support our people to grow, make a difference for customers, and help shape the future of connected mobility protection. We value a supportive culture, strong teamwork, and continuous development. We offer personal and professional development, a trusting environment with encouragement and constructive feedback, and collaboration with people from different countries and cultures. Benefits include 32 days of annual leave plus two additional days off, flexible working hours and a home-office policy (approximately 60% possible), attractive employee conditions for car insurance, employer contributions to occupational and disability pensions, supplementary company health insurance, capital-forming benefits, optional job ticket, parking and monthly travel allowance, EGYM Wellpass, a financial subsidy, free coffee, tea, water and weekly fruit delivery, health management, and pme family service.

last updated 41 week of 2026