The Group Security department as a service provider for DBG’s product organization and the Second Line of Defense of Deutsche Börse Group is responsible to protect information assets in terms of safety, integrity, confidentiality, authenticity and availability. Group Security risk management tasks and procedures are based on the requirements published as the ISO 27000-standard-series (information security management systems).
Field of Activity
The access management specialist is responsible for developing, maintaining and improving the identity and access management service within Deutsche Boerse Group. She or he is responsible to ensure compliance to laws and regulations and compliance to internal policies and takes account for the access management processes.
Tasks/Responsibilities
* Development and continuous improvement of the group wide Identity and Access management solution space
* Definition, documentation and optimization of the Identity and Access process framework
* Evaluate and provide solution to improve existing Single Sign On (SSO) experience for internal and customer facing applications integrated with ForgeRock AM/OpenAM
* Work on custom development/enhancements related to the system
* Perform POCs related to different requirements, mainly authentication & authorization flows (Trees and Chains)
* Onboard applications to the group wide access management solution using SAML or OpenID Connect
* Troubleshoot and support the existing applications integrated with OpenAM/AM
* Take responsibility, being pro-active and work independently to deliver on time
Qualifications/required skills
* Bachelor/Master degree in Information Technology, Management and Engineering, Industrial Engineering or equivalent
* Minimum of 3 years’ experience in Identity and Access management projects or practical experience during internships
* Experience with ForgeRock AM (formerly OpenAM), preferably versions 5.x/6.x
* Good knowledge of SAML, OIDC, OAuth
* Basic knowledge of OpenDJ/LDAP/AD
* Experience in Java, Shell Scripting and Javascript is desirable
* Groovy knowledge would be an advantage
* Solid handling of MS Office applications
* Proactive thinking and self-paced work on solutions is desired
* Fluent in English. German would be an added advantage
* Optional: CISSP, CISM or comparable certifications
* Strong, proven analytic and problem-solving skills
* Good presentation and documentation skills