IAM / One Identity Engineer

You are a senior DevOps engineer with strong expertise in One Identity and Identity Governance & Administration. Your strength lies in analysing, remediating, improving, and automating IAM services in complex and regulated environments. You combine engineering depth with a strong understanding of control effectiveness, evidencing, and sustainable service improvement. Identity & Access Management is key for Rabobank, as it provides employees and machines with access to the resources they need in a secure, simple, and controlled way. Within Tribe IAM, the Control Automation 4 Employees squad develops and maintains IAM capabilities in One Identity that support secure provisioning, modification, and revocation of access for Rabobank employees. As Senior One Identity DevOps Engineer, you work in Area IAM4Employees. Your focus is on improving service quality, reducing manual activities, strengthening control effectiveness, and enabling automation that supports both user-friendly IAM journeys and predictable control execution. You work closely with Product Owners, Business Analysts (Control Execution & Automation team), IAM Risk & Compliance, and fellow engineers.

• Design and implement structural improvements in One Identity services that remediate deficiencies and improve IAM control effectiveness.
• Drive automation of service and control-related activities to reduce manual effort and increase consistency, traceability, and control maturity.
• Translate control findings, operational issues, and technical risks into sustainable engineering improvements.
• Improve the quality of evidencing, monitoring, and technical substantiation for IAM services in scope of control execution.
• Contribute to scalable and reusable engineering patterns within the One Identity landscape.
• Collaborate with Product Owners, Business Analysts, and fellow engineers to translate findings into backlog-ready technical solutions.
• Strengthen squad maturity by embedding sustainable engineering patterns and improving evidencing/monitoring.

• Academic working and thinking level, preferably with a Bachelor or Master degree in a relevant field.
• Extensive experience as a DevOps Engineer, Software Engineer, or IAM Engineer in a complex IT environment.
• Strong hands-on experience with One Identity Manager and Identity Governance & Administration patterns.
• Proficient in SQL — able to independently analyse, validate, and improve data quality, queries, and control-relevant datasets within the One Identity landscape.
• Strong hands-on experience with supporting technologies: SQL Server, APIs/web services, scripting and automation tooling, job services, data mapping, system integrations within a complex IAM/IGA environment.
• Strong knowledge of IAM concepts: provisioning, deprovisioning, recertification, reconciliation, Segregation of Duties, RBAC, ABAC, PBAC, API orchestration.
• Demonstrated experience in remediation and improvement of existing IAM services (not only greenfield).
• Experience automating manual service / control / evidencing / monitoring processes.
• Strong analytical skills — ability to identify root causes behind recurring technical or control deficiencies.
• Experience in a regulated environment with high expectations on traceability, evidencing, and operational control.
• Strong communication in English.
• Effective collaboration with Product Owners, Business Analysts, Risk & Compliance, architects, and engineers across squads.
• Strong judgment, decision-making, and complex problem-solving skills.
• A motivation letter demonstrating the required competencies is requested.