IAM Architect – Identity & Access Management

About the role

As an IAM Architect you will design, evolve and ensure the effective implementation of BASF’s global Identity & Access Management landscape. You will act as the key interface between internal teams such as Cybersecurity, SAP and business units and external Managed Service Providers, guaranteeing secure, scalable solutions that meet business and compliance requirements.

Key responsibilities

• Define and evolve the global IAM strategy together with security and infrastructure experts.
• Design end‑to‑end IAM architecture covering the full identity lifecycle (joiner‑mover‑leaver).
• Steer and govern external service delivery by acting as the professional counterpart to MSPs.
• Ensure stable, secure and compliant IAM operations and integration with enterprise applications, cloud platforms and the I&O platform.
• Provide hands‑on expertise in solution design, integration and complex troubleshooting.
• Support projects and advise business stakeholders on IAM‑related topics.

Required profile

• Degree in Computer Science, Business Informatics or a comparable qualification.
• Several years of practical IAM experience, preferably in an international industrial environment with a strong SAP footprint.
• Broad IAM generalist expertise across multiple domains and a strong collaboration mindset.
• Willingness to travel, especially to the headquarters in Münster, Germany.

Required skills

• Microsoft Entra ID / Azure AD
• SailPoint (or other identity governance solutions such as One Identity)
• CyberArk
• SuccessFactors
• ServiceNow
• Keeper
• DigiCert
• SAML, OAuth, OpenID Connect
• LDAP, Active Directory
• Azure and AWS cloud platforms