Solution Architect (IAM)

About Us

ERGO Technology & Services S.A. (ET&S S.A.) was established in January 2021 following the integration of ERGO Digital IT and Atena into one entity, leveraging both companies’ strengths and best practices. As a part of ERGO Technology & Services Management AG, the technology holding of ERGO Group AG, we support millions of internal and external customers with state-of-the-art IT solutions to everyday problems.

In October 2022, ET&S S.A. expanded its scope of operations by creating a Business Services unit to contribute in a new way to the growth of ERGO’s business. Acting as a co-partner and internal consultant, it adds non-IT value and supports the development of the entire ERGO Group, currently offering skills in reporting, analysis, actuarial, and input management. We are committed to fostering innovation and meeting the evolving needs of our clients worldwide.

Discover how we implement AI, IoT, Voice Recognition, Big Data science, advanced mobile solutions, and business-related services to anticipate and address our customers’ future needs.

About the role

As a Solution Architect, you will be responsible for driving the technical direction and architecture of consumer-facing digital products of ERGO Group. You will work closely with architecture, security, and development teams to design highly available, scalable, and secure digital, cloud-based solutions that run in the complex ERGO environment. You will cooperate with a diverse group of internal stakeholders and vendor partners. Ultimately, you will ensure that designed solutions comply with ERGO group governance processes.

The ideal candidate needs to have a strong background in JAVA Full-stack development experience, and integrations with Customer IAM solutions, and a strong understanding of managing customer identities and user access to system resources based on.

How you will get the job done

• working with projects – designing, explaining, documenting, and supervising – architecture solutions and security countermeasures
• designing distributed system applications (front- and backend) in the cloud using native cloud/serverless approaches (but also some on-prem projects)
• covering end-to-end systems located on-premise and in the cloud
• documenting architecture decisions, goals, debts, risks, and tech quality in confluence requirements and keeping solution architecture documentation up to date
• modeling in UML and ArchiMate solution diagrams
• researching, evaluating, and driving modern technologies/solutions to solve customer needs
• actively contributing to various bottom-up initiatives driven by the architecture team
• creating and advising in the areas of architecture patterns and other reference architecture components
• discussing solutions with other architects, product owners, and developers
• explaining solutions to developers and other project stakeholders
• designing Customer Identity Access Management solutions to solve business problems in alignment with the enterprise architecture direction and standards
• assisting with the technical approach for the shared operational capabilities of customer identity and access management, including customer registration, self-service, authentication, authorization, administration, audit, and reporting
• working closely with development teams to build API integrations authenticated by the identity management platform
•  

Skills and experience you will need

• fluency in English
• rich experience (6+ years) and broad interests in software development and architecture including experience with programming backend and frontend applications
• experience with Identity and Access Management such as provisioning workflows, authentication, authorization, application security, privacy and consent management, regulatory compliance, multi-factor authentication, federation, and risk management
• knowledge of IAM-related protocols such as SAML, XACML, SCIM, OAuth, OIDC, REST APIs, and other security interfaces
• strong experience with Directories, SSO, Federation, MFA, API Gateways, SOA services
• knowledge of Identity Access Management solutions (e.g. ForgeRock, Okta, Ping, Microsoft, or similar)
• working experience in creating web applications – frontend (React or Angular) and backend (Java or .Net or NodeJS, etc.)
• working experience in Solution/Software Architect roles (formally or informally)
• working experience in designing distributed applications on Cloud platforms (AWS, Azure, or Google Cloud)
• knowledge of software and architecture patterns
• knowledge of DevOps practices, especially containerization, and orchestration
• presentation and communication skills
• ability to build authority and form strong relationships
• ability to deal with ambiguity while working in a continually changing environment under indirect supervision
• high decision-making and prioritization skills

Nice to have

• ForgeRock and Kubernetes knowledge