Identity Management Engineer

You’re an important part of our future. Hopefully, we're also a part of your future At B. Braun, we protect and improve the health of people worldwide. You support this vision, bringing expertise and sharing innovation, efficiency and sustainability as values. That’s why we would like to keep developing our company with you. Keeping your future in mind, we’re making a joint contribution to health care worldwide, with trust, transparency and appreciation. That's Sharing Expertise.

Identity Management Engineer

Functional Area: Information Technology

Working Model: Hybrid

Requisition ID: 12969

Duties and responsibilities

• Develop and maintain the Identity Management Platform based on OneIdentityManager
• Design and implement scalable backend services for:
• Customer administration
• Identity lifecycle processes (Joiner, Mover, Leaver)
• Build secure, high-performance service layers and processes
• Ensure modular, maintainable, and extensible application design
• Contribute to:
• CIAM strategy and roadmap
• Architecture design and evolution
• Authorization and identity standards
• Secure and scalable system design
• Implement and extend OneIdentity Manager capabilities
• Develop custom synchronization solutions (REST APIs)
• Implement data mapping, transformation, and consistency checks
• Ensure reliable data exchange and synchronization across systems
• Implement logic for license assignment and tracking
• Implement and support threat modeling and risk assessments
• Ensure compliance with: DPIA (Data Protection Impact Assessment), Data retention policies, DSR (Data Subject Rights)
• Enforce secure coding and identity security best practices
• Provide 2nd/3rd level support for CIAM services and applications
• Monitor system performance and troubleshoot issues
• Ensure high availability and reliability of identity services

Required Qualifications

Must-have

• Hands‑on experience with OneIdentityManager or similar
• Strong understanding of Identity & Access Management (IAM / CIAM) concepts, access governance, and identity lifecycle management processes.
• Familiarity with:
• Programming language: (VB.Net)
• Scripting languages (PowerShell)
• Frontend development (Angular)
• Solid understanding of:
• Authorization models, especially ReBAC
• OpenFGA or similar fine‑grained authorization systems
• Experience with:
• Integration and synchronization between systems
• Database design and handling identity data
• Designing and building processes

Nice-to-have

• Event-driven architecture
• GDPR and data privacy regulations
• CI/CD pipelines and DevOps practices
• Familiarity with EMS systems or contract management platforms

Personal Skills

• Strong analytical and conceptual thinking
• High security and quality awareness
• Ability to work in complex, regulated environments
• Strong ownership and proactive mindset
• Good communication skills with technical and business stakeholders

Benefits

• Additional social funds for summer holidays and Christmas
• Co‑funding of a Multisport card and private medical care
• Opportunity to join group life insurance
• Funding for trainings and conferences
• Co‑funding of professional development
• Free language lessons and access to an e‑learning platform
• Team‑building and sports events

Salary ranges: 14.000 - 18.000 PLN gross monthly.

The controller of the personal data contained in your CV and provided when you