Identity and Access Management Experts in Berlin
matched in minutes from over 15,000 CVsHire experts who design identity architectures, integrate SSO and MFA, and govern privileged access across cloud and enterprise systems. FRATCH matches you quickly and precisely with vetted, available freelancers for your Identity and Access Management needs.
Meet FRATCH Experts in Berlin, who have recently used Identity and Access Management
Paul K.
Last position:
Program Manager – Multi-Project Operational Stabilization (Operational Excellence) at ITDZ - IT Service Center Berlin
- Overall leadership of several strategic operations projects focusing on Workplace Services, SLA Framework, access management, certificate management, e-learning, backup & recovery, test management, and capacity management, as well as the introduction of system monitoring and feasibility studies for 24x7 operations, in some cases including implementation in ServiceNow
- Creation of various ServiceNow operating concepts covering training, access rights, and emergency management as part of a new cloud hosting initiative for the ServiceNow platform
- Executive board reports and leadership of steering committees as part of company-wide strategic objectives, as well as the establishment of new balanced scorecards for measuring KPIs related to optimization-driven project results
Julius H.
Last position:
Freelancer at Freelancer — Pharma Industry
- Led migration to GCP using Terraform, GKE, and GitOps, improving deployment consistency and scalability
- Implemented Datadog observability stack via Terraform and datadog-operator
- Established automated end-to-end tests and on-call processes, improving incident response and service reliability
- Migrated from NGINX Ingress Controller to Kubernetes Gateway API (NGINX Gateway Fabric)
- Migrated stateful services (PostgreSQL and Redis) to GCP, improving scalability and operational reliability
Lasya M.
Last position:
Data Engineer at Carelon Global Solutions (Elevance Health)
- Designed and implemented scalable ETL/ELT pipelines using Python, SQL, dbt, AWS and Informatica to ingest data from sources such as APIs, relational databases, and flat files into Snowflake, reducing pipeline runtime by ~30%.
- Migrated high-volume datasets from on-premises Teradata to Snowflake using AWS services (S3, Glue, Step Functions, IAM), ensuring data consistency and integrity.
- Applied Kimball methodology to design star and snowflake schemas, improving query performance and reducing Snowflake compute costs.
- Implemented automated data quality checks using SQL-based dbt tests and the Great Expectations framework to detect anomalies and enforce data correctness before production loads.
- Orchestrated ETL workflows in Airflow using Python and managed code deployments via Git with CI/CD best practices to increase deployment reliability and maintain pipeline uptime.
- Built interactive Power BI dashboards and curated datasets to enable data-driven decision-making for stakeholders.
- Maintained technical documentation in Confluence for ETL workflows, and led knowledge-sharing sessions for new joiners.
Jorge P.
Last position:
Software Engineer – AWS and Kubernetes Specialist at Citti
- Creation, maintenance and hardening of Kubernetes clusters employing Ansible and ArgoCD
- Keywords: Ansible, AWX, Kubernetes, NetApp, Prometheus, CI/CD ArgoCD, SSO, Fluent-bit, HAProxy, Calico, Keycloak, oauth2-proxy, SealedSecrets, kubeseal, Aqua kube-bench, CIS-Benchmarks, Aqua Trivy operator
Gyan P.
Last position:
Senior DevOps & Cloud Architect, Head of Infrastructure at Bosch
- Azure Landing Zone architecture: Design and implement a hub-spoke, multi-region-capable Azure landing zone that provides the secure, scalable and highly available foundation for autonomous driving and parking data/ML platforms.
- Compliance through Azure Policy: Enforce security and compliance standards across Azure subscriptions via Azure Policy (guardrails, deny/audit/deploy-if-not-exists), consistently achieving top-tier infrastructure security scores.
- Infrastructure-as-Code: Automate provisioning and configuration of Azure resources with Terraform and Bicep, with changes delivered through reviewed CI/CD pipelines.
- Azure Databricks and Unity Catalog: Extensive experience operating Azure Databricks with Unity Catalog for centralized data governance, access control, lineage and auditing across workspaces.
- Monitoring and observability: Built and run infrastructure monitoring and logging with Azure Monitor, Prometheus, Grafana and Loki, covering platform health, alerting, troubleshooting and capacity trends.
- Platform at scale: Architected and operate cloud data/ML platforms supporting multi-PB vehicle data ingestion and simulation; orchestrate Argo Workflow-based recompute and autolabeling services scaling to 100k+ concurrent pods on AKS.
- Reproducible ML: Established reproducible training environments with dataset versioning and provenance tracking, enabling auditing and experiment reliability.
- Operational excellence: Automated GitHub organization management and CI/CD pipelines, improving developer productivity and deployment reliability; automated recurring operational processes.
- FinOps: Developed transparent resource utilization and cost-tracking for multi-project Azure environments.
- Leadership: Technical lead for infrastructure topics, collaborating with development, DevOps and security teams; technical interviewer and recruitment panel member for scaling the engineering team.
Abhiroop B.
Last position:
Software Engineer III at Foundry Digital
- Developed and deployed microservices in Kotlin and Spring Boot, integrated AWS Secrets Manager to secure credentials and decreased network calls using Spring cache.
- Refactored Kafka consumer using Spring Kafka with semaphore-based backpressure to cap records and keep heap memory stable under spikes; switched to batch upserts to cut down on database invocations; added Testcontainers integration tests for Kafka and database to pave the way for future changes.
- Automated the financial reconciliation workflow in Spring Boot (Kotlin) using Spring Scheduler, transactional boundaries, JPA/Hibernate on MySQL, and Flyway migrations, saving the accounts team 16+ hours per week.
- Designed and dockerized payments end-to-end test framework in Robot (Python) with reusable keyword libraries and profiles; integrated with GitLab CI (JaCoCo XML and HTML reports) to accelerate releases and lift code coverage to 80%.
- Implemented end-to-end observability on Datadog by instrumenting services with Datadog APM, correlating metrics and logs, provisioning dashboards, and creating monitors with burn-rate alerts and anomalies to harden reliability and give stakeholders clear visibility.
Gor O.
Last position:
Senior IT Transformation Consultant and Business Analyst at Self-employed Consultant
Senior IT Transformation Consultant and Business Analyst specializing in banking and large-scale transformation projects.
Several years of experience in analyzing, structuring, and implementing business requirements, as well as designing target operating models in complex IT landscapes.
Strong interface skills between business units and IT, with a focus on translating business requirements into implementable IT concepts and architectures.
Solid experience in designing and optimizing end-to-end processes, as well as preparing business concepts and decision papers.
Proven project successes in the areas of Identity & Access Management (IAM), post-merger integrations, IT infrastructure, and regulatory requirements.
Confident working with agile methods and artifacts.
Bert W.
Last position:
IT Consultant, Program / Project Manager, IT Architect at Self-employed
- Consulting and project management in IT projects
- Data and process analytics, evaluation, reporting, optimization, dashboards
- Program management, project management
- Strategic consulting
- Rollout, cut-over (concept development, automation, planning)
- IT infrastructure, IT system architecture, ITIL
- Process and application management
- ITSM, IT security, data protection, IAM
- BPNM
- MDM
André S.
Last position:
IT Consultant SAP® Administration at Lechwerke AG (LEW)
- IT services for the administration of the SAP® systems NETZ/Sales, BW, Core, Portal
- Administration of SAP® authorizations and users via central user administration (ZBV) in SAP® Solution Manager
- Setup and further development of SAP® authorization roles
- Role assignment according to requests
- Creation, change, and deletion of users
- Incident handling and error analysis (e.g. authorization trace, debugging in test systems)
- Cooperation with the SAP® development team on new implementations and process changes
- Special tasks
- Execution of Privileged User Management (PUM) 2023–2025 using Security Bridge
- Decommissioning of the SAP® Core system and migration to S/4HANA
Seyed Farhad M.
Last position:
Senior Product Security Engineer at Delivery Hero
- Developed a custom tool using the Mistral 7B LLM to scan, validate, and report security vulnerabilities.
- Security tested AI agents, bots, and other LLMs, focusing on prompt injection, model inversion, data poisoning, EDR/AV bypass and evasion techniques, membership inference, model evasion, overfitting to malicious inputs, and contextual manipulation.
- Onboarded repositories to SAST solutions for security scanning, implemented secrets scanning, DAST, and SCA, and used ZAP for DAST in CI/CD pipelines.
- Delivered security awareness training and developed CTF challenges and training materials to improve developers' security knowledge.
- Planned and carried out bi-annual red teaming operations based on the MITRE ATT&CK framework and led internal and external pentests based on the OWASP Top 10 framework for 70+ applications worldwide, resulting in the detection, reporting, and remediation of hundreds of vulnerabilities.
- Triaged HackerOne reports.
Daniel B.
Last position:
Senior Cloud Consultant and Developer at SDIA/Leitmotiv
- Consulting an NGO in the field of data center sustainability in publicly funded projects (BMUKN with NADIKI and Umweltbundesamt with SIEC)
- Development of Python APIs and web applications, deployment on AWS/ECS with Terraform
- Collecting power consumption metrics for servers, CPUs, GPUs running AI workloads
- Technologies used: AWS, EC2, ECS, Fargate, CloudMap, VPC, Route53, Lambda, EventBridge, CodeBuild/CodePipeline/CodeDeploy, Terraform, Docker, Linux, Bash scripting, Python, Flask, SQLAlchemy, SQL, MariaDB, InfluxDB, Telegraf, Prometheus, Zabbix, Kubernetes, Letsencrypt, certificate management
André B.
Last position:
External Attack Surface Assessment & Cybersecurity Readiness Checks at Graydaxe Cybersecurity GmbH
- Conducting cybersecurity readiness checks based on an in-house assessment methodology
- Analyzing the external attack surface using the Graydaxe EASM platform
- Assessing maturity levels and deriving prioritized recommendations for action
Unnikuttan V.
Last position:
Managing Director (Co-Founder) at AathmaSignals
- Spearheading investor outreach and partnership development as founding MD, building the business case and technical narrative needed to attract initial funding and strategic collaborators in the digital health space
- Designing multi-agent AI systems for autonomous biosignal analysis, orchestrating LLM-based reasoning pipelines with domain-specific medical context to enable intelligent, clinical decision support
Deepak M.
Last position:
Lead ML Platform Engineer at Billie GmbH
- Mentor team of 6 ML platform engineers through weekly 1:1s, technical design reviews, and best practices, improving team velocity by 35% through structured sprint planning and skill development programs
- Define 2025–2026 ML platform roadmap in collaboration with Data Science, Cloud Engineering, and Product teams, prioritizing automated model governance, cost attribution systems, and multi-environment deployment strategies
- Partner with Data Science, SRE, and Product stakeholders to align ML platform capabilities with business objectives, reducing data scientist deployment friction by 60% through self-service platforms
- Architect and deliver production-grade MLOps platform supporting 50+ models in production with automated promotion pipelines, versioning, and rollback capabilities, achieving 99.5% platform uptime SLA
- Design distributed ML pipeline architecture using Metaflow and Argo Workflows (Vertex Pipelines-compatible), reducing model training time by 30% and deployment cycles from 2 weeks to 3 days through full CI/CD automation
- Build containerized ML services on Kubernetes with auto-scaling policies, resource quotas, and multi-tenancy isolation, optimizing infrastructure costs by $180K annually (25% reduction)
- Implement monitoring, alerting, and performance tracking using Prometheus, Grafana, and custom instrumentation, reducing model debugging time by 50% and establishing model performance SLOs
- Lead development of RAG-based document intelligence platform using LangChain, LangGraph, and vector databases, implementing agentic AI workflows for automated financial document processing
- Implement Infrastructure-as-Code using Terraform for reproducible environment provisioning and GitOps workflows, reducing infrastructure drift incidents by 80%
- Design role-based access control for ML platform, implement model lineage tracking, and establish audit trails for regulatory compliance aligned with enterprise IAM best practices
Flamur A.
Last position:
Fractional Chief Information Security Officer at VR Smart Guide GmbH
- Enhance and develop the Information Security Management System (ISMS) in compliance with ISO 27001 and TISAX standards by continuously updating and refining the ISMS to align with evolving global standards.
- Ensure that security practices and policies are integrated into all business processes to achieve and maintain certifications.
- Lead the effort to identify, evaluate and mitigate risks across the organization, setting benchmarks for security measures.
- Oversee and refine security processes, with an emphasis on incident management and rapid response by developing and enforcing policies for rapid detection, investigation and remediation of security incidents.
- Train and lead the incident response team to handle breaches effectively, minimizing impact and ensuring swift recovery.
- Implement continuous monitoring solutions to detect and respond to threats in real time.
- Conduct comprehensive security assessments for internal and external IT projects, ensuring adherence to GDPR, DORA and other relevant standards.
- Oversee security evaluations for all IT projects to ensure they comply with legal and regulatory requirements.
- Integrate security measures from the planning phase through deployment to ensure all projects uphold the organization’s security standards.
- Collaborate with project teams to address findings and ensure that security risks are managed effectively.
- Serve as the principal security advisor to the IT department and senior management, offering insights on potential security challenges.
- Facilitate a culture of security awareness throughout the organization through training and regular communication.
- Lead security initiatives that align with the organization’s long-term strategic goals.
- Establish and oversee a robust third-party risk management framework to mitigate external security threats by regularly assessing third-party security practices and compliance and developing contingency plans and mitigation strategies.
- Provide regular updates and security briefings to the executive leadership and relevant committees, highlighting recent security incidents, responses, lessons learned and recommending strategic improvements.
Discover over 15,000 top freelancers
Statistics of experts using Identity and Access Management
Aggregated from the professional profiles of matched freelancers.
Experience
20 years
Position duration
2.7 years (Germany: 2.2 years)
Positions per freelancer
10 (Germany: 13)
Top business areas
Information Technology, Product Development, Project Management
Top industries
Information Technology, Banking and Finance, Professional Services
Certification focus areas
Information Technology, Project Management, Product Development
Bachelor's degree or higher
86%
Master's degree or higher
46% (Germany: 52%)
Certifications per freelancer
4
Most common languages
English, German, French
Speak two or more languages
98% (Germany: 95%)
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Berlin are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Berlin using Identity and Access Management
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Identity and Access Management experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (93%)
- Banking and Finance (51%)
- Professional Services (39%)
- Automotive (37%)
- Manufacturing (29%)
- Retail (29%)
- Media and Entertainment (27%)
- Telecommunication (24%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
Identity foundations
Identity and Access Management controls who can access which applications, data and infrastructure, under what conditions. It covers authentication, authorization, account lifecycle management, federation and auditability. Companies use IAM to replace scattered credentials with consistent, enforceable access policies across employees, customers, partners and service accounts.
Core capabilities
IAM specialists connect identity policy with daily business operations. Their work commonly includes:
- Designing SSO, MFA and adaptive authentication flows
- Managing joiner, mover and leaver processes
- Applying role-based and attribute-based access controls
- Governing privileged accounts and service identities
- Preparing access reviews and audit evidence
Ecosystem and tooling
The ecosystem includes Microsoft Entra ID, Active Directory, Okta, Ping Identity, Keycloak and Auth0, alongside protocols such as SAML, OAuth and OpenID Connect. Strong professionals also work with directory services, secrets management, conditional access, identity governance and cloud permissions. They connect these components to HR systems, SaaS applications, APIs and infrastructure platforms.
When companies need help
Freelance expertise is useful during cloud migrations, identity provider changes, mergers and access-control redesigns. It also supports zero-trust initiatives, customer identity projects and compliance preparation. In Berlin, specialists often collaborate remotely with distributed teams or join on-site workshops when security architecture and stakeholder alignment require close coordination.
Project deliverables
A capable professional turns policy into maintainable controls and clear documentation. Typical deliverables include an identity architecture, access model, integration plan, migration runbook, provisioning workflows and incident procedures. They can also test authentication journeys, remove excessive permissions and establish ownership for identities that previously lacked oversight.
What strong professionals bring
Look for a specialist who can explain risk in business terms and still work deeply with protocols, directories and cloud services. They should distinguish authentication from authorization, understand failure modes and design recovery paths that do not weaken security. Strong professionals validate decisions with logs, access reviews and test scenarios, while documenting trade-offs for security, IT and application teams.
Frequently asked questions
Quick answers to the questions that come up most around Identity and Access Management.
Identity and Access Management is used to verify identities and control access to applications, data, devices and infrastructure. It supports SSO, MFA, provisioning, authorization, privileged access controls and audit trails across workforce and customer environments.
IAM covers a broader identity model than a traditional Active Directory deployment. Active Directory can remain an important directory and authentication source, while IAM adds federation, cloud access, lifecycle automation, governance and controls for external users and modern applications.
A strong Identity and Access Management specialist usually understands cloud security, directory services, networking, API security and infrastructure automation. Familiarity with SAML, OAuth, OpenID Connect, SCIM, secrets management and security monitoring is also valuable.
The right level depends on the scope, risk and number of systems involved. A focused SSO integration may need a specialist who can deliver a defined integration, while a broad IAM redesign requires someone comfortable with architecture, migration planning, governance and stakeholder coordination.
Identity and Access Management work is often suitable for remote collaboration because configuration, documentation and testing can be performed securely online. On-site sessions in Berlin may still help with workshops, access reviews, regulated environments or coordination across security and business teams.
Ask how the professional separates authentication, authorization and identity lifecycle concerns. Review examples of access models, migration plans and recovery procedures, then test whether they can explain security trade-offs clearly to both technical and non-technical stakeholders.
Keycloak can suit companies that need control over deployment, customization or hosting boundaries. A managed identity service may reduce operational work and provide ready-made integrations, so the decision should consider security responsibility, compliance needs, user journeys and internal operating capacity.
Identity and Access Management freelancers may deliver architecture decisions, SSO and MFA integrations, role models, provisioning workflows, access reviews and migration runbooks. They can also document operating procedures, improve audit evidence and transfer knowledge to the internal team.
The average hourly rate of freelancers in Berlin, Germany who have used Identity and Access Management in their recent projects is 108 €, which corresponds to a daily rate of about 866 € based on an 8-hour working day.
Of the freelancers in Berlin, Germany who have used Identity and Access Management in their recent projects, 86% hold at least a Bachelor's degree and 46% hold at least a Master's degree.
On average, freelancers in Berlin, Germany who have used Identity and Access Management in their recent projects have 20 years of professional experience, with a single engagement typically lasting around 2.7 years.
The most common languages among freelancers in Berlin, Germany who have used Identity and Access Management in their recent projects are English (100%), German (95%), and French (17%).
The most common industries among freelancers in Berlin, Germany who have used Identity and Access Management in their recent projects are Information Technology (93%), Banking and Finance (51%), and Professional Services (39%).
The most common business areas among freelancers in Berlin, Germany who have used Identity and Access Management in their recent projects are Information Technology (100%), Product Development (76%), and Project Management (63%).
Main locations of FRATCH Experts, who have recently used Identity and Access Management
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Hamburg 
Munich 
Cologne 
Frankfurt 
Stuttgart 
Dusseldorf 
Dortmund 
Essen 
Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
