• Architect and design Nebul’s Identity & Access Management (IAM) landscape using modern identity platforms such as Ory and Keycloak .
• Define and implement authentication and authorization flows (OIDC, OAuth2, token lifecycles, session management).
• Design role- and attribute-based access models (RBAC / ABAC) aligned with product, security, and compliance needs.
• Act as the architectural bridge between security, platform engineering, product, and operations .
• Define IAM governance principles, including identity lifecycle, access reviews, least-privilege, and auditability.
• Guide and support the implementation of IAM solutions, ensuring alignment with architectural standards.
• Advise on identity-related security risks and mitigations in high-security and regulated environments.
• Document architectures, decision records, and IAM best practices.

What We’re Looking For

• 7+ years of experience in Identity & Access Management, with a strong architectural focus.
• Proven experience designing and implementing IAM architectures in complex or enterprise environments.
• Deep understanding of OIDC, OAuth2, SAML , identity federation, and token-based security.
• Hands-on experience with Keycloak, Ory (Kratos/Hydra) or similar modern IAM platforms.
• Strong knowledge of IAM governance , access models, and compliance requirements.
• Ability to translate business and regulatory requirements into clear technical architectures .
• Comfortable operating at the intersection of management and engineering .
• Excellent communication skills in English.

Bonus Points

• Experience with IGA / PAM solutions (e.g. SailPoint, Omada, CyberArk).
• Background in security architecture, GRC, or regulated sectors (finance, government, critical infrastructure).
• Experience with cloud-native or Kubernetes-based platforms .
• Involvement in pre-sales, advisory, or consulting roles .
• Strong documentation mindset and ability to guide teams without micromanaging.

Why Nebul

• Build a sovereign European cloud platform with security and trust at its core.
• Own and shape the identity foundation of a next-generation AI and cloud platform.
• Work closely with senior engineers, security specialists, and product leaders.
• Hybrid working environment near The Hague / Amsterdam .
• Competitive compensation, growth opportunities, and influence in a critical market.

Requirements

• Based in the Netherlands (commutable to Leiden).
• Valid EU work permit (no sponsorship currently available).
• Fluent in English (Dutch is a plus, not required).

Ready to define how identity works at the core of Europe’s sovereign AI cloud?

Apply now through Frank Poll and help Nebul build a secure, scalable, and future-proof identity platform.