IT Security Engineer - Multi-Factor Authentication (MFA) 80 - 1005 (f/m/d)

Tasks

• Design, implementation, and operation of identity and access management (IAM) systems, including processes related to user account creation and digital workplaces.
• Monitoring the entire IT lifecycle of SmartID, including provisioning, renewal, deprovisioning/deregistration in close cooperation with Human Resources, Facilities, and Security Operations.
• Management of integrations between SmartID and Verisoul systems, as well as identity providers such as Microsoft Entra ID (Azure AD), Active Directory Federation Services (ADFS), and enterprise middleware systems.
• Management of incident response for all multi-factor-related disruptions, acting as a Tier 2/Tier 3 escalation point through situation handling and troubleshooting.
• Ensuring full compliance of all IT systems with information security policies, standards, guidelines, and controls to meet regulatory requirements and maintain the integrity of cryptographic material.
• Creation and maintenance of authorized technical documentation to support knowledge and operations.
• Continuous improvement of services by increasing system reliability, security, performance, availability, and automation.

Requirements

• Expertise in multi-factor authentication (MFA) technologies with hands-on experience in managing SmartID (FIDO2/PIV) and Verisoul, as well as similar security identity solutions.
• Solid understanding of authentication protocols and standards, including GAUTH 2.0, OpenID Connect, SAML, FIDO2/PIV, and certificate-based authentication.
• Experience integrating MFA solutions with identity providers such as Microsoft Entra ID (Azure AD), ADFS, or equivalent federated identity systems.
• Technical knowledge of ITIL phases 2-5, including digital certificate lifecycle management, trust lifecycle management, CAML/OCSP, and integration with endpoint authentication, certificate provisioning, and smart card token mechanisms.
• Practical understanding of key IT security domains; experience with one or more of the following is advantageous:
  • Secure web gateway technologies (e.g., Zscaler)
  • Authentication and authorization solutions (e.g., Cisco ISE, NetIQ)
  • Public Key Infrastructure (PKI)
  • Privileged Access Management (PAM)
  • Secure secret management (vault)

We offer