Senior IAM Engineer (all genders)

Location: Berlin

THE ROLE & THE TEAM

Identity and Access Management (IAM) is a key technology at Zalando, providing secure access to our services and tools for tens of thousands of employees, partnering businesses, contractors, customer care agents, and logistics staff. As the scale and complexity of our identity landscape grows, so does the engineering challenge behind it.

As a Senior IAM Engineer you will work in this dynamic environment on the line between Software Engineering and Systems Engineering, together with a talented and diverse team, influencing, building, and operating the evolving IAM technology stack at Zalando. You will work across identity governance, access lifecycle automation, and platform integrations, making a direct impact on how Zalando manages and secures access at scale.

WHAT WE’D LOVE YOU TO DO (AND LOVE DOING)

• Own and evolve a modern, cloud-native IAM platform, keeping it reliable, secure, and ahead of the curve as the identity landscape and business needs change.
• Design, build, and maintain integrations between our IAM platform and business applications, using native connectors, SCIM interfaces or custom API integrations, owning the result end-to-end.
• Extend our infrastructure-as-code tooling and custom connector implementations, closing the gaps that SaaS vendors leave uncovered.
• Drive automated provisioning across the full Joiner-Mover-Leaver lifecycle, reducing manual steps and working toward fully automated coverage across all integrated systems.
• Build data pipelines for archival, analytics, and anomaly detection on identity and access data, turning IAM events into operational insights.
• Monitor the systems for which you’re responsible; define alerts, participate in on-call rotations, and generally follow Site Reliability Engineering best practices.
• Improve our end-to-end test automation framework with a focus on acceptance testing against live platform APIs, ensuring reliability of our services and the business processes that depend on them.
• Manage and consult internal stakeholders on best practices of cross-domain identity and access management, including access models, take their requirements and enhance existing services.

WE’D LOVE TO MEET YOU IF

You have hands-on engineering experience with an enterprise IAM or IGA platform (Saviynt, SailPoint, Okta, or comparable) and have built integrations, connectors, or extensions against it, not just configured workflows through a UI.

You understand access governance concepts such as Joiner-Mover-Leaver lifecycle management, access certifications, and role management, and know how they translate into platform logic and custom code.

You are highly skilled as a software engineer in a compiled language, with Golang as the preferred choice. You are comfortable writing production-grade code, CLIs, tooling extensions, and automated tests.

You have a working understanding of identity protocols (SCIM, OIDC, OAuth2, SAML) and have implemented integrations using them.

You have a DevOps mindset: you treat operations as an engineering problem, write infrastructure as code, and are comfortable deploying and running services in a cloud environment.

You like distilling domain knowledge and working across system boundaries, taking ambiguous requirements and turning them into well-scoped, well-tested solutions.

OUR OFFER

• Zalando provides a range of benefits, here’s an overview of what you can expect. Ask your Talent Acquisition Partner to learn more about what we offer.
• 27 days of holiday a year to start for full-time employees (+1 day for every calendar year up to 30 days)
• 40% off fashion and beauty products sold and shipped by Zalando, 30% off Lounge by Zalando, discounts from external partners
• Family support, including counselling and dedicated services for parents and carers

Company pension scheme

• Employee shares programme
• Health and wellbeing options, including Wellhub
• Mental health support and coaching
• Development through our training platform and biannual peer-to-peer review
• 2 paid volunteering days a year
• Relocation assistance (subject to prior agreement)

INCLUSIVE BY DESIGN

If you think you have what it takes, we encourage you to apply even if you don't meet every single requirement. You may just be the right candidate for this or other roles!

At Zalando, our vision is to be the leading European technology platform for fashion and lifestyle – one that thrives on diversity and is truly inclusive by design. We believe that diverse teams fuel innovation and creativity, and we actively seek out talent from all backgrounds.

We actively seek to reduce bias in our hiring and employment processes, focusing on your qualifications, skills, and contributions. To support this, we kindly ask that you refrain from including personal details such as your photo, age, or marital status in your CV, ensuring a fair and equitable evaluation based solely on your abilities and potential.

We are committed to providing an exceptional and accessible candidate experience for everyone. If you require any accommodations to support you throughout the hiring process, please let us know – we are here to assist you.

Discover more about our commitment to creating a diverse and inclusive workplace: https://jobs.zalando.com/en/our-culture/diversity-and-inclusion