Consulting for Data Center Migration of a Linux Environment and IAM Platform (m/f/d)

Objective: Reorganization and migration of the existing Linux infrastructure and IAM platform to a hybrid target environment (on-premises + hyperscaler)

Building Blocks:

• Analysis & Target Architecture

• Survey of existing Linux systems, workloads, and interfaces

• Design of a scalable and highly available target infrastructure (incl. network and storage concepts)

• Definition of the target architecture considering scalability, security, and availability

• Assessment of the existing IAM solution

• Survey of the existing IAM platform, workloads, and interfaces

• Definition of the new target infrastructure (on-premises & cloud)

• Integration of the existing IAM solution

• Adoption and integration of the existing IAM structure into the new target infrastructure (e.g., IDM, LDAP, Azure AD)

• Architecture for central authentication & authorization across all target environments

• SSO and MFA concepts incl. federation with hyperscalers (e.g., SAML, OIDC, SCIM)

• Ensuring auditability and compliance requirements (GDPR, ISO27001)

• Migration strategy

• Definition of migration paths: lift & shift, replatforming

• Definition, planning, and orchestration of moves including downtime, fallback, and test concepts

• Automation & Standardization

• Further development of IaC (e.g., Terraform, Ansible)

• Creation of reusable system and security modules

• Hybrid/Multi-Cloud Architecture

• Design and implementation of cloud connectivity (e.g., AWS, Azure, GCP)

• Securing and identity federation of cloud resources with the existing IAM

• Introduction of a consistent identity lifecycle

• Handover & Documentation

• Creation of operational, architecture, and security documentation

• Conducting knowledge transfer workshops for operations and security

• Architecture and migration of distributed Linux infrastructures in traditional and cloud data centers
• Integration of existing IAM solutions into hybrid and multi-cloud environments
• Ensuring role and rights management across hybrid and multi-cloud environments
• Cloud integration with e.g., AWS IAM, Azure RBAC, GCP IAM, SSO/SAML/OIDC federation
• Access control at system, application, and API levels
• Zero-trust strategies & segmentation of access rights
• Automation (Ansible, Terraform), containerization (Kubernetes), CI/CD pipelines
• Network & security architecture (VPN, MFA, SSH access controls)
• Monitoring, logging & auditing (e.g., Azure Monitor, Prometheus)