Identity and Access Management Experts in Cologne
matched in minutes from over 15,000 CVs with the power of AIHire experts who design IAM policies, connect SSO and MFA flows, and harden access across cloud and on-prem systems. Get fast, precise matching with vetted, available freelancers.
Meet FRATCH Experts in Cologne, who have recently used Identity and Access Management
Matthias Schneider
Last position:
Overall Project Coordinator at Bundeswehr Informatik (BWI GmbH)
- PMO lead for Security Clearance 2 (SÜ2) cleared
- Reporting to sub-program management GMN
- System maintenance 25+
- Functional control and coordination of Jira setup
- Preparation of decision papers (e.g. project planning, steering model, communication plans, controlling models, role and responsibility matrices)
- Development of program-wide knowledge management using Confluence, creation of Jira concept
- Development of an access concept for all project tools
- Analyzing existing processes, identifying improvement potential, and designing solutions to increase efficiency and effectiveness
- Development of a concept for introducing automation approaches in existing tools
- Creating intranet articles as project marketing
- Responsible for project governance through reporting and resource planning in the sub-program
- Agile further development of the project method
- Gathering customer requirements (requirements engineering)
- Preparation and support of contract negotiations (7-year term, budget of over 500 million)
Markus Blohm
Last position:
Consultant, Technical Project Manager at Lanxess
- Project: ESU Windows and SQL Server consolidation / Configuration Management in ServiceNow
- Creation of an as-is analysis of all servers worldwide
- Creation of an as-is analysis of all SQL servers worldwide
- Creation of requirements analyses for SQL and server migrations
- Coordination of requirements with partners for migrations to Hyper-V (on-premises) or Azure Cloud
- Moderation of jour fixe meetings
- Creation of roadmaps and solution models for server migrations
- Setup of test scenarios
- Moderation of workshops for the introduction of a Global Admin Team
- Creation of data models (CMDB) in ServiceNow
- Conducting workshops for the CMDB data model
- Creation of solution models for the CMDB
- Creation of seamless configuration and work documentation for the CMDB
- Creation of reports for license management
- Creation of KPIs for data quality in ServiceNow
- Creation of a service catalog
- Moderation of workshops for creating service requests
- Interface between needs analysis and ServiceNow development team
- Systems used: Windows 7, Windows 10, Microsoft Office 365/2010, Windows Server 20xx, SQL Server 20xx, SharePoint, Azure Cloud, Hyper-V, ServiceNow, various tools
Halil Oeztoprak
Last position:
Senior Cloud Operations & DevSecOps Engineer (Azure / Terraform / CI-CD) at KfW Bankengruppe
Regulated environment within a German banking group (approx. 8,500 employees, hybrid cloud strategy).
Responsible for operating, provisioning, and continuously securing business-critical platforms – including a GenAI chat application, a big data/AI platform, and data science workspaces based on Azure Virtual Desktops and VMs. Ownership of Azure DevOps projects for ShaiHulud and React2Shell, as well as BSI alerts – Security Operations improvements across the SDLC.
Deployment responsibility for the GenAI chat application, big data/AI platform (BDAI), and data science workspaces (AVD/VM-based) in the respective landing zones.
Deployment & release management: end-to-end responsibility for deploying portal and service applications across multiple Azure landing zones, including technical approvals, compliance with development team deployment guidelines, and ensuring ITIL-based change and release processes via ServiceNow.
Azure landing zones & network architecture: design, provisioning, and operation of Azure landing zones for 3-tier web applications with enhanced network segmentation, VNet peering, hub-and-spoke architectures, private endpoints, and firewall integration across separate subscriptions and tenants.
Azure DevOps governance & operations: ownership of the Azure DevOps organization, including projects, repositories, and CI/CD pipelines; implementation of governance requirements such as branch policies, approval gates, permission models, and audit-ready operating structures.
Infrastructure as Code (Terraform): design, implementation, and operation of a modular Terraform architecture for standardized cloud infrastructure deployment, including state management, provider versioning, reusability, and policy-as-code approaches.
CI/CD pipeline engineering: design, operation, and optimization of complex YAML-based CI/CD pipelines with multi-stage deployments, template standardization, self-hosted agents, integrated secret management, and automated quality and security checks.
Git migration & platform consolidation: planning and execution of repository and pipeline migration from Azure DevOps to GitLab CI/CD, including automated scripts, full Git history transfer, pipeline porting, and platform consolidation.
Container & platform operations (AKS): operation and security assessment of containerized workloads on Azure Kubernetes Service, centralization of on-premises container registries for ACR.
OpenShift (OCP) security reviews: security assessment of code baselines, build pipelines, and deployment processes for on-premises OpenShift clusters with critical applications, and derivation of specific hardening recommendations.
Shift-left security & DevSecOps transformation: introduction of a company-wide shift-left approach for early security integration in development and deployment processes, enabling developers to perform self-led security checks and sustainably reduce vulnerabilities before production (IDE integrations, pre-commit hooks, local scanners).
Software supply chain security: analysis and mitigation of supply chain risks in NPM- and Yarn-based applications through dependency audits, CI/CD pipeline hardening, token rotation, and restriction of risky build and lifecycle mechanisms.
Frontend & framework security (React / Next.js): security assessment and coordination of critical vulnerability remediation across platform applications and web frameworks, including coordination and complementary technical mitigations with all teams following BSI alerts.
Software composition analysis (SCA): introduction and operation of automated vulnerability scans for container images, pipelines/artifacts, and third-party dependencies, including SBOM exports within CI/CD pipelines.
SAST/DAST integration: design and piloting of static and dynamic application security tests in close collaboration with security architecture and development teams, for continuous improvement of code and runtime security, and establishing operational acceptance tests.
Artifact & registry consolidation: analysis and consolidation of all package and container repositories for service applications and AKS workloads, aiming for a centralized, secured registry strategy with centralized vulnerability scanning and governance.
Dependency-Track & SBOM strategy: advising the compliance board on introducing a central SBOM and vulnerability management platform to increase enterprise-wide dependency transparency and accelerate CVE response capability.
CI/CD pipeline hardening: security analysis and cleanup of the existing pipeline landscape by removing unused pipelines, improving secrets hygiene, implementing least-privilege principles, and isolating build agent environments.
Azure Web Application Firewall (WAF) optimization: analysis and tuning of existing Azure WAF rules (OWASP Top 10 Core Rule Set, DSR/SDC, custom rules) to defend against known vulnerabilities and exploit patterns, including reducing false positives and improving threat detection.
Documentation & stakeholder communication: creating and maintaining technical documentation, runbooks, and architecture overviews in Jira and Confluence, as well as active knowledge transfer between operations, development, security, and compliance stakeholders.
Joachim Lange
Last position:
Marketing / Sales / Communication Consultant at Independent Management Consultant
Client: STROTH Telecom GmbH (formerly Tele2 Comm. Services GmbH) Business Development B2B / B2C
Development of growth & go-to-market strategy for new products
Content strategy for brand relaunch
Selection and setup of a marketing automation solution
Concept and marketing of a white-label mobile solution
Project management of partnerships with WEtell and ENTEGA Mobile
Client: S-Communication Services GmbH (Sparkassen Financial Group) Project Management IAM (Integrated Address Management)
Analysis of current product portfolio
Market analysis of banking & finance
Identification of required adjustments for medium-term planning
Formulation of IAM vision
Client: ERGO Group AG Sales Promotion
Activation of sponsorship partnership with the German Football Association (DFB)
Media collaborations
Social media communication
Support for sales partner network
Client: E.ON SE Innovation Domains / Strategy & Innovation
Coaching on business case development (individual / teams)
Training on key financials (NPV calculation) / scenario planning
Development of sales strategies for innovations
Teaching storytelling skills
Creation of templates
Target KPI alignment / metrics (portfolio performance)
Johannes Wagner
Last position:
Senior Data Engineer at Soorce GmbH
- Analysis of business requirements
- Integration of different data sources such as ERP systems, production systems, and external data sources
- Implementation of load processes and processing logic with MSSQL
- Data modeling and optimization of data models
- Setting up data quality management incl. data profiling with dynamic programming
- Support in designing and establishing data governance, especially in the areas of data quality management and data protection
- Support in developing BI solutions with Tableau to help decision-making processes
Sergo Neuwert
Last position:
SAP Principal Consultant (RM-CA) at Vodafone GmbH
- Support in fit-gap analysis for three RM-CA systems focusing on sub-ledger reconciliation, dunning, and collections processes.
- Stakeholder management in international teams (business colleagues, IT colleagues, and external partners).
- Escalation and risk management (PM).
- Cost and budget calculation (PM).
- Support in shaping the strategic direction of the global collections system.
- Resolving technical challenges for the central collections system (multi-company operation).
- High-level design of the central AR system with focus on scalability and process harmonization.
Ralph Konitzer
Last position:
Product Owner / Business Owner at AXIS Management Consulting GmbH
- Full product responsibility from a business perspective: requirement analysis, UX design, product strategy, and go-to-market implemented without an internal dev team using fully AI-supported development (Claude Code / Anthropic)
- Technical differentiation: KRITIS-compliant air-gapped deployment (Windows/NSIS), GDT interface for PVS integration, DATEV-LODAS export for payroll
- Managed pilot operation with initial external client (Dormagen medical practice): structured requirement gathering, test support, error analysis, and release management
- Developed rollout and sales strategy for market entry in the segment of private practices and small medical centers
- Human-in-the-Loop development principle: business decision → AI implementation → manual review → approval → release – each sprint documented in Jira (TIME project), every change traceable via co-authored commits
- Product outcome: Tauri/Rust desktop app with GDT watcher, multi-tier model (Starter/Professional/Enterprise), cloud mirror on Hetzner/Traefik, complete ISMS framework based on ISO 27001 and BSI basic protection as product foundation
- Direct method validation for the test manager role: hands-on experience with quality assurance of AI-generated products from a user perspective, review gate discipline, release approval under GDPR and the EU AI Act
Valeri Milke
Last position:
Associate Partner - Information Security Consulting at Insentis GmbH
- Improvement of the Information Security Management System (ISMS) based on ISO 27001, NIS2, DORA, B3S, TISAX and BSI IT Baseline Protection
- Conducting comprehensive gap analyses to identify gaps and derive action plans according to the above standards and regulations; management and KPIs
- Data Loss Prevention strategy and implementation using MS Purview
- Vulnerability and patch management, security monitoring
- Risk analysis and threat modeling using the STRIDE methodology
- Development of vendor risk assessments, implementation of risk classifications, conducting supplier assessments and implementing technical monitoring solutions (e.g. Security ScoreCard)
- Securing cloud environments (AWS and Azure); expertise in CSPM/CNAPP (Wiz), cloud migration, secure CI/CD pipelines, container security and best practices in AWS, Azure and Office 365
- Application security: penetration testing, DevSecOps, OWASP, pre-commit hooks, key and secret management, IDE plugins, static source code analysis, dependency checks, container scanning, vulnerability management, CIS benchmarks and compliance
- Security assessment and hardening according to CIS benchmarks and cloud conformity in AWS, Office 365 and Azure
Christian Hunkirchen
Last position:
Developer at Opereon Consulting GmbH
- Developed a shop website
- Integrated an AI language model
- Developed tools for AI-powered webhooks
- Technical tools: REACT.js; Elevenlabs; MCP; n8n; HTTP
Jens Hagemeyer-Lee
Last position:
#52 Test Manager in Safety-Critical Infrastructure at Telecommunications Company
- Network elements, network, operational and operator-related systems
- Supporting around 20 different products (managed agile)
- Requirements analysis and management (functional and non-functional)
- Test concept and planning (scope, test phases, effort, schedule, resources, organization, etc.)
- Aligning approach with clients and service providers
- Managing and assisting in creation of test cases for system, integration and end-to-end tests
- Guiding and supporting test execution
- Defect management and planning bug fixes with external providers
- Preparing and facilitating workshops
- Regular reporting and creating automated test reports
- Further development of agile testing methodology and configuration of supporting tools
- Conceptual support in developing a quality seal for rating product and service quality of internal and external providers
- Requirements engineering based on ISO/IEC 25010, Scrum, SaFE
- BMC Remedy, Atlassian Confluence, Atlassian Jira (including plugins Xray, Structure), Microsoft Office (incl. Visio), Obsidian, doxis document management system, Gitlab, Obsidian
Thomas Ullrich
Last position:
Senior Consultant / PM Infrastructure Services & Workplace Migration at Freelance
- All Windows clients are managed in a hybrid, central AD
- Client standardization
- Implementation of information security policy requirements
- Development of new infrastructure services delivered as a managed service by a new provider
- New IT platform is a central and secure directory service
- M365 Azure AD
- MS terminal services
- Zscaler
- M365 cloud for workplace management
- PaaS / SaaS is procured through a new provider
Pierre Gronau
Last position:
Ansible Automation, Windows Third Level Support at DB InfraGO AG
- PRISMA project
- Ansible automation
- Windows third level support for Windows NT, Windows 2000, Windows 2013, Windows 2016, Windows 2019
Banjika Ngo
Last position:
Freelance | AWS Authorized Instructor at Go Courses
- Delivered AWS-authorized content through AAI program
- Facilitated group and 1-on-1 mentorship sessions
- Coached non-technical learners into cloud career paths
- Created learning materials aligned with AWS Skill Builder and AWS Academy labs
André Filip
Last position:
GenAI Product Owner at OW Media Solutions GmbH
- Designed and led the development of an automated short-video generation system.
- Built a scalable AWS backend using Step Functions, Lambda, S3, ECS Fargate, and DynamoDB.
- Developed video rendering with OpenCV and FFMPEG; ensured maintainable Python code.
- Supervised and mentored a Python developer and trained the client in AI workflows.
- Decreased end-to-end production time from hours to minutes.
- Created a modular, extensible architecture designed to support future AI models.
Finesa Shala
Last position:
AWS Grocery App
- Designed and deployed a cloud-based grocery list app using AWS EC2 for hosting and RDS for persistent data storage, achieving 99.9% uptime across all test environments
- Reduced average response time by 2× through efficient deployment logic and optimized database queries, resulting in a smoother user experience across devices
- Utilized AWS (EC2, S3, RDS, IAM), Azure basics, Terraform, CloudFormation, Docker, Kubernetes basics, Jenkins, GitHub Actions, TCP/IP, DNS, Python, Bash scripting
Discover over 15,000 top freelancers
Statistics of experts using Identity and Access Management
Aggregated from the professional profiles of matched freelancers.
Experience
17 years (Germany: 19 years)
Position duration
1.8 years (Germany: 2.2 years)
Positions per freelancer
16 (Germany: 13)
Top business areas
Information Technology, Project Management, Operations
Top industries
Information Technology, Telecommunication, Healthcare
Certification focus areas
Information Technology, Project Management, Product Development
Bachelor's degree or higher
85% (Germany: 86%)
Master's degree or higher
62% (Germany: 54%)
Certifications per freelancer
6 (Germany: 4)
Most common languages
German, English, Spanish
Speak two or more languages
94% (Germany: 96%)
Based on our profile pool as of 30 Aug 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Cologne are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Cologne using Identity and Access Management
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 30 Aug 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
About the technology
IAM in practice
Identity and Access Management controls who can sign in, what they can reach, and how access is approved. It sits behind employee portals, customer logins, partner access, and admin consoles. Strong IAM work keeps access simple for users and strict for the business.
Core building blocks
- Single sign-on with SAML, OIDC, and OAuth 2.0
- Multi-factor authentication and passwordless sign-in
- Role, group, and attribute-based access control
- Provisioning, deprovisioning, and access reviews
- Federation across internal and external identity sources
Common ecosystems
IAM specialists work with tools such as Okta, Microsoft Entra ID, Ping Identity, Keycloak, and Auth0. They also connect directories like Active Directory and LDAP, then align them with apps, APIs, and cloud services. The right setup depends on the target stack, not on one fixed product.
When companies bring help
Teams bring in freelance IAM experts when sign-in flows are failing, access rules are messy, or a rollout must fit many systems at once. Cologne companies often need help when local business units, partner portals, and remote staff must share one secure identity model. Clear documentation and careful change control matter as much as configuration.
What strong experts deliver
Strong professionals translate security rules into working access paths. They map user journeys, define least-privilege access, test federation, and support audits without slowing delivery. They also spot gaps in lifecycle processes, such as orphaned accounts, stale roles, and risky admin permissions.
Project signals
A company usually needs IAM expertise when it is moving to SSO, replacing legacy login code, or standardizing access across SaaS and internal systems. Other signs include repeated lockouts, manual onboarding, unclear ownership of roles, or compliance findings tied to access control. Good freelancers make these problems visible and fixable.
Frequently asked questions
Not sure where to start with Identity and Access Management? These answers cover the essentials.
Identity and Access Management controls authentication, authorization, and user lifecycle steps. It helps a company decide who can sign in, what they can do, and when access should be removed. That covers employee systems, partner portals, customer apps, and privileged admin access.
IAM is the broader discipline, while SSO and MFA are parts of it. SSO reduces repeated logins, and MFA adds stronger proof of identity. A good IAM setup usually combines both with rules for roles, groups, and provisioning.
A strong Identity and Access Management freelancer should know the main identity stack around the project. Common tools include Okta, Microsoft Entra ID, Ping Identity, Keycloak, Auth0, Active Directory, and LDAP. The best choice depends on whether the work is centered on cloud apps, internal systems, or mixed environments.
Identity and Access Management is usually better when many systems must share one identity model. A custom login can work for a single product, but it often creates duplicated code, weak governance, and harder audits. IAM centralizes identity rules, federation, and access changes.
A capable IAM specialist should understand security architecture, directory services, APIs, and cloud identity patterns. Familiarity with SAML, OIDC, OAuth 2.0, and SCIM is often essential. Good communication also matters because access design affects security, operations, and business owners at the same time.
For a small sign-in integration, a focused Identity and Access Management expert may be enough. For federation across many applications, role design, or audit remediation, you usually want someone who has handled complex identity landscapes before. The more systems and exceptions you have, the more important proven judgment becomes.
Most IAM work can be done remotely because configuration, testing, and documentation are digital. On-site time in Cologne can help when access owners, security teams, and business stakeholders need fast decisions in workshops. Many projects use a mixed setup with remote delivery and occasional local sessions.
Look for clear examples of how the Identity and Access Management expert handled federation, lifecycle automation, and least-privilege access. Good signs are clean documentation, careful testing, and the ability to explain trade-offs without jargon. Ask how they prevent orphaned accounts, role sprawl, and broken sign-in journeys.
The average hourly rate of freelancers in Cologne, Germany who have used Identity and Access Management in their recent projects is 111 €, which corresponds to a daily rate of about 890 € based on an 8-hour working day.
Of the freelancers in Cologne, Germany who have used Identity and Access Management in their recent projects, 85% hold at least a Bachelor's degree and 62% hold at least a Master's degree.
On average, freelancers in Cologne, Germany who have used Identity and Access Management in their recent projects have 17 years of professional experience, with a single engagement typically lasting around 1.8 years.
The most common languages among freelancers in Cologne, Germany who have used Identity and Access Management in their recent projects are German (100%), English (94%), and Spanish (22%).
The most common industries among freelancers in Cologne, Germany who have used Identity and Access Management in their recent projects are Information Technology (78%), Telecommunication (61%), and Healthcare (56%).
The most common business areas among freelancers in Cologne, Germany who have used Identity and Access Management in their recent projects are Information Technology (100%), Project Management (89%), and Operations (72%).
Main locations of FRATCH Experts, who have recently used Identity and Access Management
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg 
Munich 
Frankfurt 
Stuttgart 
Dusseldorf 
Essen 
Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
