IAM Architect (Relocation Provided) (copy)
Amsterdam
(Cyber) Security – IAM Engineer /
Permanent /
Hybrid
Are you an experienced Identity and Access Management (IAM) Architect passionate about defining secure, scalable, and future-ready identity ecosystems? Join Wypoon Technologies and play a strategic role in designing, governing, and modernizing IAM architectures for our global clients across workforce, customer, and partner identities.
In this role, you will define IAM roadmaps, create reference architectures, and ensure identity capabilities support security, regulatory, operational, and business objectives. You will work with enterprise IAM platforms such as SailPoint, Ping, CyberArk, Okta, Azure AD, or similar solutions, helping clients strengthen Identity Security, align with Zero Trust principles, and enable secure digital transformation with a frictionless user and customer journey.
Why Join Us?
At Wypoon Technologies, you’ll work on dynamic projects for industry leaders such as Heineken, ING, ASML, Philips, and Shell, tackling exciting challenges and delivering tailored enterprise solutions.
Here’s what makes us stand out:
✔ Impactful Work: Shape the future of our clients’ digital landscapes.
✔ Innovative Environment: Collaborate within a supportive team that values learning and growth.
✔ State-of-the-art technology: Access the latest tools and platforms.
✔ Global Opportunities: Are you dreaming of living and working in the Netherlands or Belgium? We provide full support with visa processes, making your transition smooth and hassle-free!
Key Responsibilities
- IAM Architecture & Strategy: Define, design, and govern end-to-end IAM architecture across workforce, customer, and partner identity domains.
- Identity Security Roadmap: Drive the strategic IAM roadmap, ensuring alignment with business priorities, regulatory expectations, and long-term digital transformation goals.
- Reference Architecture & Design: Create IAM reference architectures, patterns, and conceptual, logical, and physical designs for enterprise-scale environments.
- Zero Trust & Regulatory Alignment: Ensure IAM capabilities align with Zero Trust principles and support resilience requirements in line with Dutch and EU financial-sector regulations such as DORA, NIS2, PSD2, and GDPR.
- Enterprise IAM Platforms: Provide architectural direction for IAM platforms such as SailPoint, Ping, CyberArk, Okta, Azure AD, ForgeRock, or similar technologies.
- Access Models & Role Engineering: Design scalable identity models, including RBAC, ABAC, and large-scale role engineering approaches.
- Cloud & Hybrid Identity: Architect cloud IAM, federation, and hybrid identity solutions, with strong focus on Azure AD / Microsoft Entra ID and enterprise identity integrations.
- Privileged Access Management: Design PAM architectures to secure high-privilege access across cloud, infrastructure, applications, and critical business systems.
- Identity Threat Detection & Response: Support the integration of ITDR, identity threat analytics, and monitoring capabilities to detect and respond to identity-based risks.
- Stakeholder Leadership: Partner closely with engineering, security, compliance, risk, business, and architecture teams to translate strategic objectives into practical IAM solutions.
- IAM Transformation: Lead or support IAM transformation initiatives in complex, regulated enterprise environments, ensuring strong governance, adoption, and operational scalability.
Requirements
- Experience: 8+ years of experience in Identity and Access Management, cybersecurity, security architecture, or enterprise architecture, with strong hands-on IAM architecture experience.
- Education: Bachelor’s or Master’s degree in computer science, cybersecurity, information systems, engineering, or a related field.
- Language Skills: Proficiency in English at B2 level or higher, covering speaking, writing, listening, and reading.
- IAM Architecture Expertise: Deep understanding of modern IAM frameworks, standards, and enterprise identity architecture principles.
- IAM Platforms: Hands-on architecture experience with enterprise IAM platforms such as SailPoint, Ping Identity, CyberArk, Okta, ForgeRock, NetIQ, Azure AD / Microsoft Entra ID, or similar solutions.
- Protocols & Standards: Strong knowledge of SAML, OAuth, OpenID Connect, LDAP, SCIM, and FIDO2.
- Identity Models: Proven experience designing identity models, including RBAC, ABAC, access governance, entitlement management, and large-scale role engineering.
- Cloud IAM: Strong understanding of cloud IAM, Azure AD / Microsoft Entra ID, hybrid identity, federation, conditional access, and identity integration patterns.
- PAM Architecture: Expertise in Privileged Access Management architecture and securing high-privilege access across enterprise environments.
- Security & Risk: Familiarity with ITDR, identity threat analytics, identity attack paths, and security monitoring concepts.
- Architecture Deliverables: Ability to create reference architectures, architecture patterns, roadmaps, conceptual designs, logical designs, and physical designs.
- Regulated Environments: Experience leading IAM transformations in complex, regulated environments, ideally within banking, financial services, or other highly regulated sectors.
- Architecture Methodologies: Experience with TOGAF or similar enterprise architecture methodologies.
Preferred Skills & Experience
- Experience working in banking, fintech, insurance, or other regulated enterprise environments.
- Knowledge of Dutch and EU regulatory requirements such as DORA, NIS2, PSD2, GDPR, ISO 27001, and SOC 2.
- Experience with Zero Trust Architecture, NIST Cybersecurity Framework, or similar security frameworks.
- Relevant certifications such as TOGAF, CISSP, CISM, CCSP, SailPoint, CyberArk, Okta, Microsoft Security, or equivalent.
- Experience with API security, microservices, customer identity, CIAM, and digital customer journey enablement.
- Familiarity with Agile methodologies and tools such as Jira and Confluence.
What We Offer
- Competitive Compensation: Salary tailored to your skills and experience.
- Generous Time Off: 25 paid vacation days (based on a 40-hour work week).
- Job Security: A direct and permanent contract from day one!
- Relocation Support: A relocation and travel budget to ease your transition.
- Tax Benefits: Eligibility for the 30% ruling.
- Travel Reimbursement: We've got your daily commute covered.
- Top-Notch Equipment: A high-quality device to ensure you work efficiently.
- Professional Development: Financial support for certifications, technical training, and language courses—because we value your long-term career growth.
- Family: Visa sponsorship for your partner and children under 18.
- Temporary Accommodation: Stay in temporary housing while we help you find your permanent home.
- Comprehensive Relocation Assistance: Extensive support to help you settle in smoothly.
- Community & Fun: Enjoy team events and connect with developers from around the globe!
Join Wypoon Technologies, where your expertise will thrive, your ideas will be valued, and your career will reach new heights.
Apply now to help build the future of IAM solutions and make a real impact!
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
