24.06.2026 aktualisiert
verifiziert
Premiumkunde
100 % verfügbarSenior Consultant-IT Governance\Information Security\IAM\PAM
Hofheim, Deutschland
Weltweit
Skills
AI AgentsIAMCertificate of Cloud Security KnowledgeCertified Information Security ManagerMicrosoft Security EssentialsSailPoint
FÄHIGKEITEN, KENNTNISSE & ERFAHRUNGEN
Safeguard: Jump Host, RDP Proxy, Session Recording, JIT Timer, Credential Vault
CyberArk: Ephemeral Credentials, Zero Standing Privilege, Threat Detection, SoD
Azure PAM: NSG Rules, Firewall Policies, Port Management, Conditional Access
PIM - Privileged Identity ManagementEntra ID PIM: Role Activation, JIT Access, MFA, Approval Workflows, Auto-Revoke
RBAC: Custom Roles, Service Principals, Access Reviews, Compliance Validation
Identity Governance & Business RolesBusiness Roles: Birthright Roles, Joiner-Mover-Leaver, Entitlement Automation
SailPoint: Role Mining, Certification Campaigns, SoD Rules, Compliance Reports
HR Integration: SuccessFactors, Workday, E-RM Systems
Information Security - Purview & DLPData Classification: Sensitivity Labels, Auto-Labeling, Retention Labels
DLP: Data Loss Prevention, Encryption, External Sharing Controls
Rights Management: Email Encryption, Document Protection, No-Copy Controls
Audit Trail: Session Recording (Video + Keystrokes), 7-Year Retention
Identity Platforms & ProtocolsEntra ID: User/Device Management, Hybrid Identity, MFA, Passwordless Auth
Active Directory: LDAP, Kerberos, Group Policy, Cloud Migration
Keycloak: User Federation, Identity Brokering, OIDC/SAML
Protocols: SCIM 2.0, SAML 2.0, OpenID Connect, OAuth 2.0
Firewall & Network SecurityNSG Rules: Inbound/Outbound, Priority, Allow/Deny, Source/Destination/Port Filtering
Configuration: ALLOW Jump Host (10.0.1.50), DENY 0.0.0.0/0
Ports: RDP (3389), SSH (22), SQL (1433), HTTPS (443), DNS (53)
Diagnostics: NSG Flow Logs, Network Watcher, Packet Capture, VPN/IPSec
COMPLIANCE & STANDARDS
ISO 27001: Information Security Management System. Risk Assessment, Access Control, Incident Management, Business Continuity Planning, Audit & Certification.
BSI C5: German Cloud Security Standard. Cloud-specific controls, data residency, encryption key management, audit rights, GDPR compliance.
DORA: Digital Operational Resilience Act (Banking/Finance). ICT Risk Management, Third-Party Risk, Security Testing, Incident Reporting. Mandatory by Jan 17, 2025.
NIS2: Network & Information Systems Security Directive (EU). Critical Infrastructure Protection, Risk Management, Incident Reporting, Supply Chain Security. Mandatory Oct 19, 2025.
Praktisch: NERC CIP (Energy), Session Recording (7 Jahre), Access Control, PAM/PIM für Compliance.
Zeichenanzahl: 744 / 1000
Erfahrung
Berufserfahrung5 - 10 Jahre
Freelancer seit2017
Sprachen
DeutschMutterspracheEnglischverhandlungssicher