About The Role

If you're someone who inspires others, owns their impact and wants to elevate what they do, you'll fit right in.

Until July 1, our business was part of BASF. As part of the current transition, all job listings and the application process are still hosted on the BASF platform and therefore fully presented in BASF branding.

Please do not be confused by this: All roles are positions at Surventis, and your application will be submitted to us.

At Surventis, we go beyond the surface - in everything we do. We put customers at the center, think one step ahead, and develop solutions that create real value and lasting partnerships.

We inspire each other to think further, take ownership of our work, and constantly push to elevate what's possible. If you bring your full self, challenge the obvious answer, and want to grow with a team that means it - this is your place.

WHAT YOU CAN EXPECT

As an IAM Architect, you will design, evolve, and oversee the implementation of our global Identity & Access Management (IAM) landscape. Acting as the main IT Infrastructure interface between internal teams and Managed Service Providers (MSPs), you will ensure IAM solutions are secure, scalable, and compliant with business requirements. You will own key IAM domains including Entra ID/Azure AD, Access Governance, SSO, MFA, PIM/PAM, Joiner–Mover–Leaver processes, Password Vaults, and PKI & Key Management. Your key responsibilities include:

Define and evolve the global IAM strategy together with security and infrastructure experts

Design end-to-end IAM architecture across all identity lifecycle processes (Joiner–Mover–Leaver)

Act as professional counterpart towards MSPs: steer and govern external service delivery

Ensure stable, secure, and compliant IAM operations as well as integration with enterprise architecture (I&O Platform, applications, cloud)

Provide hands-on expertise in solution design, integrations, and complex troubleshooting scenarios

Support and advise projects and business stakeholders on IAM-related topics

WHAT WE NEED FROM YOU

Degree in computer science, business informatics, or comparable qualification
Several years of practical experience in IAM, ideally in an international industrial environment with strong SAP footprint
Broad expertise as an IAM generalist across multiple domains
Hands-on experience across core IAM domains, leveraging solutions such as Entra ID, SailPoint, CyberArk, SuccessFactors & ServiceNow, Keeper and DigiCert

Strong expertise in

Microsoft Entra ID / Azure AD

Identity Governance solutions (e.g., SailPoint, One Identity)
Authentication protocols (SAML, OAuth, OpenID Connect)
Directory services (LDAP, Active Directory)
Cloud platforms (Azure, & AWS)
Experience working with and steering Managed Service Providers
Solid understanding of IT infrastructure and hybrid cloud environments
Strong collaboration mindset with willingness to work closely with international teams and travel to sites esp. headquarter Münster, Germany
Ability to translate business requirements into pragmatic, scalable solutions
Structured, self-driven, and solution-oriented working style
Strong communication skills and experience working in global teams

Fluent in English

WHAT WE OFFER

Continuous learning and career development through our internal job opportunities.
A safe work environment where we actively promote your health and well-being.
Subsidized canteen on site.
Free company shuttle service between Alcalá and Marchamalo.
Competitive compensation package including a fixed salary and performance-based variable pay.
Opportunities to connect outside the office and stay active through company sports groups.
Flexible benefits package, which can be allocated voluntarily to transportation, training, childcare, and more.
Financial support for schooling and additional benefits for families.