Identity and Access Management Experts
in minutes from over 15,000 CVs with the power of AIHire experts who design IAM policies, set up SSO and MFA, and connect directory services with business apps. Get fast, precise matching with vetted, available freelancers.
Meet FRATCH Experts who have recently used Identity and Access Management
Matthias Kühnlein
Last position:
Business Owner at AKM
Management of multiple MFA methods for central authentication within a corporate group. Interface between various stakeholders such as support, finance, developers, and security departments. Budget controlling and monitoring of KPIs and SLAs. Review of operational documentation
Shamaila Mahmood
Last position:
Founder/Kubernetes and Cloud Architect at Kubekanvas
- Developed a browser-based platform for Kubernetes no-code deployment and cluster management
- Developed a CLI in TypeScript to deploy resources in the cluster without leaving the browser UI.
- Implemented DevSecOps pipelines: image scanning, SBOM, policy enforcement, supply-chain security, and used Kyverno. Implemented IAM integration for the command-line utility tool.
- Designed role and permission models for Keycloak, OAuth/OIDC, and social login flows.
- Used LLMs to convert user intent into diagrams.
- Worked on integration with multiple sovereign clouds like StackIT, Hetzner, CIVO, UpCloud, plus public clouds like AWS, GCP, and Azure
- The technology stack includes Java, Spring Boot, Kubernetes, OpenAI, Kubernetes multi-tenancy using vCluster, Karpenter, RBAC for CLI, Helm, React
Christian Fritsch
Last position:
Architecture Management at Agency
Expert in the company's architecture management area
Support for standardizing the company's IT landscape
Further development of architecture management
Shaping the company's business architecture
Restructuring, administration and maintenance of all IT assets
Support in creating a unified software asset management and CMDB
Creation of unified document management (e-file)
Transition of documents into a central DMS structure
Link between architecture management and the department's internal business process management
Support in developing strategic and tactical development plans
Organizing communication with key stakeholders
Support in the conception, organization and coordination of the architecture office to be built up
Accompanying and advising the entire architecture management process
Advising the company's business units on architectural topics and their framework conditions
MS Office, Windows 10, VBA
ITIL, TOGAF, PowerBi, Kanban, Scrum
Internal agency tools
Open Touch Conversation, Webex, wire, bdbos
MS Sharepoint, JIRA, Confluence
ARIS, Archimate, BPMN
Alwin G.
Last position:
IT Interim Manager & AI Strategist
- AI product development: Design of an AI-supported GRC platform to automate compliance processes.
- AI expertise: Strategic deepening in Agentic AI and GenAI as a core asset for modern IT governance
- IT interim management and strategic consulting
Markus Halbedel
Last position:
Senior M365 Consultant at BITMARCK GmbH
Creation of concepts for M365 implementation, especially Tenants, EntraID, EntraConnect and ExchangeOnline, taking BAS standards into account (mandatory baseline security requirements) in the project "Concept M365" with the aim of transferring the concepts to the M365 environments of Bitmarck and then handing them over to the customer.
- Creation of a current-state analysis of the existing M365 environments as well as the on-premises environments and the BAS standards.
- Creation of concepts for the topics Tenants, EntraID, EntraConnect and ExchangeOnline taking the BAS standards into account
- Design and implementation of an automated solution for creating standardized M365 tenants based on Microsoft M365 DSC (Desired State Configuration)
- Transfer of the concepts into the M365 environments
- Creation of detailed technical documentation
Collin Kempkes
Last position:
Software Architect / Fullstack Developer at Equity Bytes
Built an international e-commerce platform for a multi-vendor marketplace for digital assets from scratch. Designed and operated cloud native architectures at enterprise scale.
- Designed and operated a highly scalable microservice and serverless architecture
- Built the complete cloud infrastructure with Terraform + AWS CDK in AWS
- Provisioned ECS/EKS clusters (Fargate), Application Load Balancers (reverse proxy), and Lambda functions
- Observability & tracing with CloudWatch, DataDog, Prometheus, and Grafana
- End-to-end setup with DataDog (formerly AWS CloudWatch), Prometheus, and custom Grafana dashboards
- Integration of advanced metrics (including ORM mapper) and distributed tracing with Jaeger
- Robust backup and disaster recovery strategies
- RDS Postgres backups and hourly snapshots
- Read-only, asynchronously synchronized replicas with automated master failover in emergencies
- Minute-level rollback capability through versioned Docker images on ECS and Git-based CI/CD pipelines
- Created CI/CD pipelines with GitHub Actions for automated multi-stage deployments (Dev, Testing, Prod)
- Integrated Stripe for international payment processing
- Built a marketplace payment system with multiple parties and payout routines
- Used Algolia for high-performance real-time search of digital assets on the platform
- Federation of services with GraphQL and Hasura
- Later migration to GraphQL Mesh
- Test Driven Development (TDD) - unit, integration, and E2E testing with Jest, Vitest, and Playwright
- Used Next.js / React for modern frontend applications in the nx monorepo
- Enterprise security architecture & access control
- Integration of JWT tokens with Auth0, OAuth, OIDC, IP guards, BOLA protection, and secret vaults
- Authorization concepts with RBAC, ABAC, and native Postgres Row-Level Security (RLS)
- Built internal microfrontends with Retool for fast prototyping and operational business processes
Technologies: ABAC, AWS CDK, AWS CloudWatch, AWS ECS, AWS EKS, AWS Fargate, AWS RDS, AWS S3, Algolia, Auth0, DataDog, Docker, GitHub Actions, Grafana, GraphQL, GraphQL Mesh, Hasura, JWT, Jaeger, Java, JavaScript, Jest, Kotlin, Kubernetes, Monorepo, Next.js, OIDC, Playwright, Postgres, Postgres RLS, Prometheus, RBAC, Redis, Retool, Serverless, Stripe, Terraform, TypeScript, Vitest
Jens Henneberg
Last position:
Interim CTO (occasional assignments) at Fujitsu / FSAS
Stabilizing an Azure/.NET landscape in live operation.
- Architecture, DevOps, and operational readiness; technical decisions under time pressure
- Azure DevOps, monitoring, ETL/ELT, cloud security, FinOps, and data-mesh-related topics
Technologies: Azure DevOps, .NET, CI/CD, monitoring, FinOps
Michael Nelz
Last position:
Senior AI Engineer | Forward Deployed Engineer at Tiefbau
- Development of an AI-powered project organization tool for a civil engineering company that intelligently links project, task, tender, schedule, and document data through a knowledge graph.
- Implementation of AI features for document analysis, information extraction, context-based assistance, and voice-based data capture based on Microsoft Azure AI, reducing administrative effort, making information available faster, and supporting project teams in decision-making.
- Tech stack: Python, React, TypeScript, FastAPI, Claude Code, Codex, Graphify, PostgreSQL, Microsoft Azure AI Foundry, Azure OpenAI, Azure AI Speech, Azure AI Document Intelligence, Microsoft Graph, Microsoft Entra ID, Docker, Git, CI/CD.
Maciej Sawicki
Last position:
Product Owner at Bundesagentur für Arbeit
- As part of the project, the further development of the identity management system was driven forward. This included a comprehensive refactoring of the interfaces to the connected target systems. In addition, several special systems were successfully connected to the IAM to ensure end-to-end identity and authorization management.
- Technical design and solution proposals for IAM system development
- Requirements analysis and requirements management (IREB, BABOK)
- Alignment of the strategy with the future target architecture (TOGAF)
- Prototyping of solutions
- Documentation of requirements (Innovator)
- Analysis and documentation of requirements and creation of process models (UML, BPMN, ArchiMate)
- Modeling of requirements and system functionalities (OOA/OOD, UML)
- Further development of interfaces (SOAP, REST)
- Carrying out architecture reviews
Matthias Schneider
Last position:
Overall Project Coordinator at Bundeswehr Informatik (BWI GmbH)
- PMO lead for Security Clearance 2 (SÜ2) cleared
- Reporting to sub-program management GMN
- System maintenance 25+
- Functional control and coordination of Jira setup
- Preparation of decision papers (e.g. project planning, steering model, communication plans, controlling models, role and responsibility matrices)
- Development of program-wide knowledge management using Confluence, creation of Jira concept
- Development of an access concept for all project tools
- Analyzing existing processes, identifying improvement potential, and designing solutions to increase efficiency and effectiveness
- Development of a concept for introducing automation approaches in existing tools
- Creating intranet articles as project marketing
- Responsible for project governance through reporting and resource planning in the sub-program
- Agile further development of the project method
- Gathering customer requirements (requirements engineering)
- Preparation and support of contract negotiations (7-year term, budget of over 500 million)
Wolfgang Orgler
Last position:
Business Analyst at Österreichische Post AG
IT systems: Azure DevOps, SharePoint, Opal/Repost, JustinMind, Monday, SAP
Analysis of requirements for branch software
Coordination of intercultural teams
Partly agile project organization
Master data management / DMS
UI/UX design and mockup creation
Requirements documentation
Digitalization of signatures
Stakeholder management and workshop facilitation
Billing/bank transfer
Business analysis / requirements engineering
Christian Hildebrandt
Last position:
Senior Business Consultant CTV Sales - Livestreaming at Under NDA
- Strategic consulting for the implementation of a CTV sales concept in the livestreaming area - sports
- Consulting and support in selecting sales partners
- Strategic consulting and screening of ad technologies, their integration, and delivery of an integrated business workflow
- Stakeholder management and management support
- Pricing, cost and benefit analyses
- Sub-project leadership for external and internal stakeholders and teams
Firas Jradi
Last position:
Interim Management Group Head of IT Governance & IAM at French-German Private Bank
- Head of the group-wide, international, and cross-functional IT Governance & IAM department within the central IT division of a large French-German private banking group. Disciplinary management of around 30 employees at five different locations within the group (Frankfurt, Paris, Tunis, Saarbrücken, Düsseldorf). Head of IT committees and key role in direct communication with management, the supervisory board, external stakeholders, and regulators.
- Definition and establishment of a state-of-the-art IT strategy process and related IT governance structures for the group's IT department with more than 600 employees (testified by the German Federal Financial Supervisory Authority and the ACPR) and successful process run.
- Establishment of a new future-oriented process framework for IT and necessary governance structures (process squads) for the continuous improvement of IT processes with regard to new regulatory requirements (including DORA, EU AI Act, etc.).
- Establishment of stringent processes to close a historical backlog of findings (> 100 IT findings, 40 overdue findings in 2022) from internal and external auditors (WP, ACPR, BaFin). Successful reduction of stock of overdue findings to 0 at the end of 2025.
- Supporting more than 20 IT audits per year and establishment of regulatory monitoring processes. Introduction of ServiceNow to revolutionize regulatory change and IT compliance processes with advanced AI functionalities.
- Realignment of IT control processes in conjunction with the newly established ICT risk function under DORA and the three lines of defense concept using the TopEase GRC solution.
- Reduction of the application landscape, by systematically analysing the purpose with application and business owners, identifying duplicates while implementing a One-Tool Strategy throughout the group. Successful reduction of one third of the application landscape within the CMDB.
- Onboarding of all group applications into One Identity's group-wide IAM solution, as well as operation and further development of the solution in connection with segregation of duties (SoD), role-based access management (RBAC), etc.
Sabahattin Kunas
Last position:
Fully responsible (concept, development, infrastructure, operations) at Own project busik.ch
- Ride-sharing and bus platform, live and fully functional. Backend Spring Boot 4.1 on Java 21, PostgreSQL with Flyway, Testcontainers integration tests. Operation in my own AWS account (ECS Fargate, ALB, ECR, IAM least privilege) with CI/CD via GitHub Actions and OIDC federation without static credentials. Development throughout AI-assisted with Claude Code, including my own skills and project-specific memory. Spring Boot · Java 21 · PostgreSQL · Flyway · Docker · AWS ECS/ALB/ECR · CI/CD · GitHub Actions · Claude Code
Boris Solos
Last position:
Generalist expert for software development at Mercor
- Training AI models, evaluating images and text UI/UX, turning the provided data into insights through OpenAI Feather as part of the machine learning workflow
Technologies: OpenAI Feather
Discover over 15,000 top freelancers
Statistics of experts using Identity and Access Management
Aggregated from the professional profiles of matched freelancers.
Experience
20 years
Position duration
2.2 years
Positions per freelancer
14
Top business areas
Information Technology, Project Management, Product Development
Top industries
Information Technology, Banking and Finance, Professional Services
Certification focus areas
Information Technology, Project Management, Product Development
Bachelor's degree or higher
85%
Master's degree or higher
52%
Doctorate
6%
Certifications per freelancer
4
Most common languages
German, English, French
Speak two or more languages
96%
Based on our profile pool as of 6 Sep 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts using Identity and Access Management
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 6 Sep 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
About the technology
IAM basics
Identity and Access Management controls who can sign in, what they can reach, and what they can do after login. It sits around user lifecycles, access rules, and secure authentication flows. Companies bring in specialists when access has to be clear, consistent, and easy to audit.
Common work
- Single sign-on setup across business apps
- Multi-factor authentication and conditional access
- User provisioning and deprovisioning flows
- Role design and least-privilege access models
- Federation between internal and external systems
Tooling and ecosystems
Strong professionals work with platforms such as Okta, Microsoft Entra ID, Keycloak, Ping Identity, and Auth0. They also know SAML, OAuth 2.0, OpenID Connect, and directory services like LDAP and Active Directory. The best specialists can map these pieces to the way a company already runs identity.
When to hire
Bring in freelance expertise when sign-in is fragmented, access reviews are messy, or new apps need to join an existing identity setup. IAM work also appears during mergers, cloud migrations, partner portals, and SaaS rollouts. In many teams, the hardest part is not login itself but connecting policy, security, and business rules.
What good specialists do
Good IAM professionals think in flows, not just settings. They document trust relationships, reduce manual access steps, and avoid weak exceptions that create risk later. They also work cleanly with security, infrastructure, and application specialists so identity decisions stay usable.
Quality signals
Look for clear decisions on authentication, authorization, and lifecycle handling. Strong experts explain why they chose a pattern, how they test access paths, and how they handle rollback when identity changes affect users. They should also be comfortable reviewing legacy IAM setups and tightening them without breaking daily work.
Frequently asked questions
Everything clients usually want to know about Identity and Access Management, in one place.
Identity and Access Management covers how people, partners, and services prove who they are and what they are allowed to use. It includes login, SSO, MFA, role-based access, and account lifecycle handling. In practice, it is the control layer around business applications and data access.
A strong Identity and Access Management freelancer is useful when sign-in is split across tools, access is hard to review, or new systems need to fit an existing identity model. Teams also hire help for migrations, directory cleanups, and federation projects. The goal is usually to make access simpler without weakening security.
Identity and Access Management is the broader discipline, while Okta, Auth0, and Microsoft Entra ID are products used to implement parts of it. A freelancer should understand the pattern first, then choose the right mix of product features and custom logic. The best choice depends on whether the focus is workforce access, customer login, or both.
A good Identity and Access Management specialist usually understands SAML, OAuth 2.0, OpenID Connect, LDAP, and Active Directory. Security review skills matter too, along with cloud identity and application integration. If the setup is complex, knowledge of governance, audit trails, and incident handling is also valuable.
Simple sign-on changes may need only one focused Identity and Access Management expert, while broad access redesigns need someone who has worked across many systems. The real question is not years but whether the person has handled the same identity pattern before. Complex federation, migration, or role-model work needs deeper hands-on judgment.
Yes, most Identity and Access Management work can be done remotely because the main tasks are design, configuration, testing, and documentation. On-site collaboration helps when there are many internal stakeholders, sensitive change windows, or older systems that are hard to model from afar. Many teams use a mixed setup.
Look for clear access models, careful handling of edge cases, and practical rollback plans. A strong Identity and Access Management freelancer can explain trade-offs in plain language and show how they tested sign-in, authorization, and deprovisioning. They should also spot risky shortcuts before they reach production.
Identity and Access Management supports all three when the setup is designed well. Workforce IAM handles employees and contractors, while customer identity and partner access need different trust rules and user journeys. A good specialist can separate those needs without creating duplicate identity systems.
The average hourly rate of freelancers who have used Identity and Access Management in their recent projects is 106 €, which corresponds to a daily rate of about 849 € based on an 8-hour working day.
Of the freelancers who have used Identity and Access Management in their recent projects, 85% hold at least a Bachelor's degree, 52% hold at least a Master's degree, and 6% hold a doctorate.
On average, freelancers who have used Identity and Access Management in their recent projects have 20 years of professional experience, with a single engagement typically lasting around 2.2 years.
The most common languages among freelancers who have used Identity and Access Management in their recent projects are German (98%), English (96%), and French (20%).
The most common industries among freelancers who have used Identity and Access Management in their recent projects are Information Technology (93%), Banking and Finance (60%), and Professional Services (43%).
The most common business areas among freelancers who have used Identity and Access Management in their recent projects are Information Technology (99%), Project Management (73%), and Product Development (67%).
Main locations of FRATCH Experts, who have recently used Identity and Access Management
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg 
Munich 
Cologne 
Frankfurt 
Stuttgart 
Dusseldorf 
Essen 
Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
