Senior IAM Engineer (all genders)

Role: Senior IAM Engineer (all genders) Team: Identity and Access Management (IAM) is a key technology at Zalando, providing secure access to our services and tools for tens of thousands of employees, partnering businesses, contractors, customer care agents, and logistics staff. As the scale and complexity of our identity landscape grows, so does the engineering challenge behind it. Responsibilities: - Own and evolve a modern, cloud-native IAM platform, keeping it reliable, secure, and ahead of the curve as the identity landscape and business needs change. - Design, build, and maintain integrations between our IAM platform and business applications, using native connectors, SCIM interfaces or custom API integrations, owning the result end-to-end. - Extend our infrastructure-as-code tooling and custom connector implementations, closing the gaps that SaaS vendors leave uncovered. - Drive automated provisioning across the full Joiner-Mover-Leaver lifecycle, reducing manual steps and working toward fully automated coverage across all integrated systems. - Build data pipelines for archival, analytics, and anomaly detection on identity and access data, turning IAM events into operational insights. - Monitor the systems for which you’re responsible; define alerts, participate in on-call rotations, and generally follow Site Reliability Engineering best practices. - Improve our end-to-end test automation framework with a focus on acceptance testing against live platform APIs, ensuring reliability of our services and the business processes that depend on them. - Manage and consult internal stakeholders on best practices of cross-domain identity and access management, including access models, take their requirements and enhance existing services. Qualifications: - Hands-on engineering experience with an enterprise IAM or IGA platform (Saviynt, SailPoint, Okta, or comparable) and have built integrations, connectors, or extensions against it, not just configured workflows through a UI. - Understanding of access governance concepts such as Joiner-Mover-Leaver lifecycle management, access certifications, and role management, and how they translate into platform logic and custom code. - Highly skilled as a software engineer in a compiled language, with Golang as the preferred choice. Comfortable writing production-grade code, CLIs, tooling extensions, and automated tests. - Working understanding of identity protocols (SCIM, OIDC, OAuth2, SAML) and have implemented integrations using them. - DevOps mindset: treat operations as an engineering problem, write infrastructure as code, and are comfortable deploying and running services in a cloud environment. - Like distilling domain knowledge and working across system boundaries, taking ambiguous requirements and turning them into well-scoped, well-tested solutions. What We Offer: - 27 days of holiday a year to start for full-time employees (+1 day for every calendar year up to 30 days) - 40% off fashion and beauty products sold and shipped by Zalando, 30% off Lounge by Zalando, discounts from external partners - Family support, including counselling and dedicated services for parents and carers - Company pension scheme - Employee shares programme - Health and wellbeing options, including Wellhub - Mental health support and coaching - Development through our training platform and biannual peer-to-peer review - 2 paid volunteering days a year - Relocation assistance (subject to prior agreement)