{"id":1886887,"url":"https://alion.io/job/basf-iam-architect-identity-access-management-mfd","title":"IAM Architect - Identity & Access Management (m/f/d)","company":{"id":96193,"name":"BASF","domain":"basf.com","url":"https://alion.io/company/basf-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":{"grade":"A","score":100,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":7,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Madrid, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":48000,"max_usd":116000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":672},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CyberArk","optional":false},{"name":"IAM","optional":false},{"name":"LDAP","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PKI","optional":false},{"name":"ServiceNow","optional":false}],"status":"live","first_seen_at":"2026-10-05T02:59:01Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-21T17:07:56Z","board_verified":true,"closed_at":null,"days_open":16,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":16},"description":"Ubicación\nMadrid (híbrido)\nWELCOME TO OUR TEAM\nIf you're someone who inspires others, owns their impact and wants to elevate what they do, you'll fit right in.\nUntil July 1, our business was part of BASF. As part of the current transition, all job listings and the application process are still hosted on the BASF platform and therefore fully presented in BASF branding.\nPlease do not be confused by this: All roles are positions at Surventis, and your application will be submitted to us.\nAt Surventis, we go beyond the surface - in everything we do. We put customers at the center, think one step ahead, and develop solutions that create real value and lasting partnerships.\nWe inspire each other to think further, take ownership of our work, and constantly push to elevate what's possible. If you bring your full self, challenge the obvious answer, and want to grow with a team that means it - this is your place.\nWHAT YOU CAN EXPECT\nAs an IAM Architect, you are responsible for designing, evolving, and ensuring the effective implementation of our global Identity & Access Management (IAM) landscape. You combine strategic architecture ownership with hands-on expertise, acting as the IT-Infrastructure key interface between internal teams (esp. Cybersecurity, SAP, Applications, business units) and Managed Service Providers (MSP). In cooperation with the MSP, you ensure that IAM solutions are secure, scalable, and aligned with business and compliance requirements. You will take ownership across the following IAM domains: Entra ID / Azure AD, Access Governance, SSO, MFA, PIM/PAM, Joiner-Leaver-Mover Integration, Password Management Vault, PKI & Key Management. Your key responsibilities include:\nDefine and evolve the global IAM strategy together with security and infrastructure experts\nDesign end-to-end IAM architecture across all identity lifecycle processes (Joiner-Mover-Leaver)\nAct as professional counterpart towards MSPs: steer and govern external service delivery\nEnsure stable, secure, and compliant IAM operations as well as integration with enterprise architecture (I&O Platform, applications, cloud)\nProvide hands-on expertise in solution design, integrations, and complex troubleshooting scenarios\nSupport and advise projects and business stakeholders on IAM-related topics\nWHAT YOU OFFER\nDegree in computer science, business informatics, or comparable qualification\nSeveral years of practical experience in IAM, ideally in an international industrial environment with strong SAP footprint\nBroad expertise as an IAM generalist across multiple domains\nHands-on experience across core IAM domains, leveraging solutions such as Entra ID, SailPoint, CyberArk, SuccessFactors & ServiceNow, Keeper and DigiCert\nStrong expertise in:Microsoft Entra ID / Azure AD\nIdentity Governance solutions (e.g., SailPoint, One Identity)\nAuthentication protocols (SAML, OAuth, OpenID Connect)\nDirectory services (LDAP, Active Directory)\nCloud platforms (Azure, & AWS)\n\nExperience working with and steering Managed Service Providers\nSolid understanding of IT infrastructure and hybrid cloud environments\nStrong collaboration mindset with willingness to work closely with international teams and travel to sites esp. headquarter Münster, Germany\nAbility to translate business requirements into pragmatic, scalable solutions\nStructured, self-driven, and solution-oriented working style\nStrong communication skills and experience working in global teams\nFluent in Spanish and English\nWHAT WE OFFER\nContinuous learning and career development through our internal job opportunities.\nA safe work environment where we actively promote your health and well-being.\nSubsidized canteen on site.\nFree company shuttle service between Alcalá and Marchamalo.\nCompetitive compensation package including a fixed salary and performance-based variable pay.\nOpportunities to connect outside the office and stay active through company sports groups.\nFlexible benefits package, which can be allocated voluntarily to transportation, training, childcare, and more.\nFinancial support for schooling and additional benefits for families.\nHOW TO REACH US\nSubmit your CV in English through the job posting so we can get to know each other. If your profile matches, our Spanish Talent Acquisition team based in Germany will contact you (phone prefix +49) and guide you through the process. With each step, you’ll be closer to meeting your future team!\nIf you have any questions about the process, feel free to contact Liliana (*).\n*Please note that we will not be able to accept applications via this email address.\nDiversity is our greatest strength!\nBecome a part of our winning formula for success and develop the future with us - in a global team that embraces inclusion and equal opportunities irrespective of gender, age, origin, sexual orientation, disability or belief.","description_format":"text","description_chars":4890,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"Spanish","level":"Advanced (C1)","optional":false},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"Germany","iso":"DE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Farming & Agriculture","Transportation & Logistics","AgTech","Wind Energy"],"lifecycle":[{"event":"open","at":"2026-10-05T02:59:01Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Senior or Specialist Worker, Graduate Trainee, Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Senior or Specialist Worker; Global Business Mobility: Graduate Trainee; Skilled Worker","cap_exempt":false,"checked_at":"2026-10-21T06:25:45+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0},{"country":"NL","licensed_sponsor":true,"evidence":"Recognised sponsor of the Dutch immigration service (IND)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Highly skilled migrants and regular labour","cap_exempt":false,"checked_at":"2026-10-19T06:52:34+00:00","sources":["IND: public register of recognised sponsors (work)"],"filings_for_role_12m":0}],"liveness":{"score":25,"band":"fade","label":"Fading","p_open":1,"p_active":0.705,"p_room":0.35,"age_days":16,"expected_fill_days":7,"reasons":["conf:4","velocity","win:tail","comp:brand"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/basf-iam-architect-identity-access-management-mfd","json_url":"https://alion.io/job/basf-iam-architect-identity-access-management-mfd.json","meta":{"generated_at":"2026-10-21T20:03:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28534,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":96193},"rest":"https://alion.io/mcp/rest/get_company?id=96193"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbasf-iam-architect-identity-access-management-mfd"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbasf-iam-architect-identity-access-management-mfd"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbasf-iam-architect-identity-access-management-mfd"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/basf-iam-architect-identity-access-management-mfd\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbasf-iam-architect-identity-access-management-mfd"}]}