Senior IAM Engineer

Senior IAM Engineer - Privileged Access
Rotterdam | Hybrid | Payroll/Detachering only (no ZZP) | Dutch & English required

Our client, a large international engineering company based in Rotterdam, is looking for a Senior IAM Engineer to join their Identity & Access Management team.

About the role

You'll own and mature the organisation's Privileged Access Management (PAM) solution, currently built on BeyondTrust, expanding onboarding, improving integrations, and driving automation across privileged access processes. You'll act as the senior technical all-rounder in a small IAM team, working alongside SailPoint, Microsoft Entra ID, and directory services, while serving as the senior technical counterpart to the IAM Product Owner.

It's a hands-on, engineering-first role (roughly 70% engineering/automation, 30% operational support) in a pragmatic, low-hierarchy environment - you'll be expected to take initiative, investigate issues independently, and turn requirements into practical technical solutions.

Your responsibilities

• Run, maintain, and continuously improve the organisation's PAM solution
• Design and optimise privileged access processes for administrators, suppliers, systems, applications, and non-human identities
• Develop automation and scripting for onboarding, access assignment, policy enforcement, and reporting
• Design and maintain integrations between PAM and identity, directory, application, and workflow services
• Apply security principles such as least privilege, secure administrative access, and role-based access control
• Analyse and resolve complex incidents involving privileged access, remote access, and identity integrations

About you

• Extensive IAM engineering experience, with hands-on knowledge of BeyondTrust or a comparable PAM solution
• Strong Microsoft Entra ID knowledge (Conditional Access, MFA, PIM, RBAC)
• Solid automation/scripting skills (PowerShell, APIs)
• Broad practical understanding of identity governance and access control
• Experience with SailPoint, Secret Server, or Azure Key Vault is a plus

Key details

• Rotterdam-based, hybrid (up to 2 days WFH after onboarding)
• Full-time, 40 hours per week (32 negotiable)
• Long-term assignment through December 2027, preferred start September 2026
• Payroll/detachering only - freelance (ZZP) is not permitted
• Fluency in English is required; proficiency in Dutch is strongly preferred

Salaris: €5.000,00 - €7.500,00 per maand

Arbeidsvoorwaarden:

• Reiskostenvergoeding
• Werk vanuit huis

Werklocatie: Hybride werken in 3063 Rotterdam