Identity and Access Management Experts in Frankfurt
in minutes from over 15,000 CVs with the power of AIHire experts who design IAM architectures, set up SSO and MFA, and connect identity systems like Okta, Microsoft Entra ID, Ping Identity, or Keycloak. Get fast, precise matching with vetted, available freelancers.
Meet FRATCH Experts in Frankfurt, who have recently used Identity and Access Management
Firas Jradi
Last position:
Interim Management Group Head of IT Governance & IAM at French-German Private Bank
- Head of the group-wide, international, and cross-functional IT Governance & IAM department within the central IT division of a large French-German private banking group. Disciplinary management of around 30 employees at five different locations within the group (Frankfurt, Paris, Tunis, Saarbrücken, Düsseldorf). Head of IT committees and key role in direct communication with management, the supervisory board, external stakeholders, and regulators.
- Definition and establishment of a state-of-the-art IT strategy process and related IT governance structures for the group's IT department with more than 600 employees (testified by the German Federal Financial Supervisory Authority and the ACPR) and successful process run.
- Establishment of a new future-oriented process framework for IT and necessary governance structures (process squads) for the continuous improvement of IT processes with regard to new regulatory requirements (including DORA, EU AI Act, etc.).
- Establishment of stringent processes to close a historical backlog of findings (> 100 IT findings, 40 overdue findings in 2022) from internal and external auditors (WP, ACPR, BaFin). Successful reduction of stock of overdue findings to 0 at the end of 2025.
- Supporting more than 20 IT audits per year and establishment of regulatory monitoring processes. Introduction of ServiceNow to revolutionize regulatory change and IT compliance processes with advanced AI functionalities.
- Realignment of IT control processes in conjunction with the newly established ICT risk function under DORA and the three lines of defense concept using the TopEase GRC solution.
- Reduction of the application landscape, by systematically analysing the purpose with application and business owners, identifying duplicates while implementing a One-Tool Strategy throughout the group. Successful reduction of one third of the application landscape within the CMDB.
- Onboarding of all group applications into One Identity's group-wide IAM solution, as well as operation and further development of the solution in connection with segregation of duties (SoD), role-based access management (RBAC), etc.
Alfons G.
Last position:
Senior Migration Consultant / Technical Project Lead
Europe-wide re-platforming & centralization
- Independently created the migration concept and implementation plan for the Europe-wide centralization and consolidation of IT services for around 20 European companies as part of a re-platforming program.
- Migration assessment: analysis of the existing IT, infrastructure, application, and service landscapes of the companies as the basis for the migration strategy.
- Development of the centralized target vision and target architecture based on a modern technology stack, taking platform and containerization approaches into account.
- Design of a highly available central infrastructure in an active-active model across two data centers; consideration of cloud, infrastructure, application, CMDB, and IAM services.
- Development of the migration and transformation roadmap, including defining migration waves, dependencies, requirements, and priorities for the move from decentralized services to the central platform.
- Analysis of technical and organizational dependencies, identification of migration risks, and development of a structured approach for step-by-step migration and centralization.
- Creation of target, solution, and implementation views for each service domain; design of the end-to-end join-move-leave process as a blueprint for the European rollout (Jira/Jira Asset Management).
- Alignment of migration strategy and roadmap with European companies, management, IT, providers, and other stakeholders; presentation of the 12-month roadmap to the Managing Director Europe.
Kevin Fischer
Last position:
DevOps and Platform Engineer at DB Systel GmbH
- Error analysis and fixes including performance optimization of the in-house developed platform API
- Change and incident management in day-to-day operations
- Responsible for compliance with security and compliance requirements
- Vendor management for software development and maintenance
- Planning and execution of migration of legacy services to a cloud native platform
Role in the project: project staff, implementation team
Used skills: requirements analysis, IT service and application management, IT operations, error analysis and performance optimization, software maintenance and lifecycle management
Project environment: Cloud Native Platform (Kubernetes, Crossplane, AWS, ArgoCD, Grafana)
Noel Lang
Last position:
Founder & Lead Engineer at ausbildung-in-der-it.de
- Platform established and running stably; deliberately reducing my involvement to refocus on an engineering mandate in the financial sector.
- Built an own SaaS learning platform from the ground up and scaled it to over 20,000 users (over 6,000 courses sold, B2C and B2B); end-to-end ownership from development through infrastructure to operations.
- Built a lab environment that provisions an isolated Linux container per user (Docker, Traefik, Go), including automatic provisioning and a dedicated subdomain per user.
- Integrated LLM features into the product and accelerated development end-to-end with AI-assisted workflows (Claude Code, Codex); CI/CD with automated tests.
Tan Pham
Last position:
DevOps Engineer in the DevOps Team at Rise-World
- Implementation of specified DevOps solutions to automate infrastructure (Terraform, Bicep, CloudFormation, Ansible) on-premises datacenter (Ovirt, Proxmox, Ceph Cluster, MinIO) and private cloud.
- Administration, configuration and implementation of CI/CD DevOps pipelines (GitLab, GitFlow) to support development process (Artifactory, Prometheus, Istio, service mesh, Helm Chart, OpenShift (Red Hat Enterprise) / Kubernetes cluster), Red Hat Satellite.
- Administration, setup, monitoring and patching of Linux infrastructure based on Red Hat Enterprise for Dev, Test and QA.
- Use of Scrum and Kanban methods.
- Administration, configuration and implementation of security standards for deploying on Dev, Test, QA and Prod stages of the new ePA applications.
- Development of new plugins and add-ons needed on current infrastructure.
- Database support.
- Data analytics support (Python, Spark, Pandas, Power BI, Splunk Enterprise).
- Implementation of best practices for DevSecOps and BizDevOps using GitOps (ArgoCD), Streamlit framework, Semaphore Ansible UI.
- Configuration and testing of iperf, uperf, sysbench using benchmark-operator for external source data and IoT/MDM devices, creating reports via ELK / OpenSearch.
- Building a new Databricks platform to collect and analyze big data from different sources and IoT devices into Hadoop framework (Python, Pandas, PySpark, Power BI, Apache Airflow).
- Building backend data aggregation and processing to automate configuration deployment between different OpenShift clusters and big data framework (Python, Pandas, PySpark, Apache Spark, PostgreSQL, Django 2, Ansible Automation, Jira JSM).
- Building a new ML pipeline platform using Kubeflow, TensorFlow, KServe.
- Data extraction, transformation and loading from different data sources including structured and unstructured data to analytic DWH / big data cluster using Python, Pandas, Polars, Power BI, Django backend and PostgreSQL.
- Setup of new DevOps Test and QA HashiCorp Vault cluster for PKI and IAM.
- Configuration and testing of automated patching based on CVSS score, SIEM-integrated CVEs.
- Use of Nexpose and InsightVM to scan vulnerability events in network, host, container and application.
- Design and implementation of secure and scalable AWS architectures including VPC, EC2, S3, RDS and Route53 and similar setups on Azure and GCP.
- Automated system provisioning and deployment using CloudFormation templates.
- Configuration of IAM roles, policies and permissions to ensure secure access control.
- Patch management, backup automation and disaster recovery setup on AWS infrastructure.
- Monitoring and optimization of system performance using AWS CloudWatch and AWS Trusted Advisor.
- Support of VMware services (vSphere, Aria, Horizon) and the virtual desktop environment.
- Development and maintenance of CI/CD pipelines using Jenkins, GitLab CI/CD and AWS CodePipeline with interface to Nutanix.
- Configuration of AWS CloudWatch to monitor application performance and system events.
- Planning and execution of migration of on-premises applications to AWS cloud platforms.
- Deployment of containerized applications using Docker and Kubernetes in AWS environments.
- Deployment of internal software packages between availability zones using AWS CodeDeploy.
- Building and deploying ML models using Scikit-learn, XGBoost and Spark MLlib including hyperparameter tuning, model evaluation and production deployment.
Andreas Ilias
Last position:
Cybersecurity Specialist Assessor at Bundesnetzagentur
- Recognition of national notified bodies
- Preparation of cybersecurity competency reports
- EU Radio Equipment Directive
Fabrizio Di Carlo
Last position:
Managing Director at ContrailRisks Germany
- Founded and lead a cybersecurity advisory firm focused on virtual CISO services for financial, SaaS, and critical infrastructure clients.
- Advise executive teams on cyber risk, regulatory compliance (DORA, NIS2, ISO 27001), and incident preparedness.
- Built and executed security programs from scratch, driving measurable maturity improvements.
- Delivered tailored risk assessments, policies, and cloud security guidance (AWS, Azure).
- Scaled the business through client acquisition, partnerships (Vanta, AWS, etc), and a network of senior consultants.
Peter Scheitterer
Last position:
IT Project Manager at PAS Provider for Hospital
Overall responsibility for managing a clinical digitization project in a regulated hospital environment.
Design and implementation of a patient call and management system (PASO) for the orthopedics department of a large hospital.
- Project management, planning, and control
- Process analysis and optimization, and managing implementation and rollout
- Coordination with clinical departments, IT, and external service providers
- Ensuring integration into existing IT and process landscapes
Project scope: 310 person-days, team size: 21 members.
Reinhard Gefing
Last position:
IT Infrastructure / User Management at UMF – University Medical Center Frankfurt
- User account management and creation in Active Directory
- Group management and modification in Active Directory
- Permission management on file servers
- Exchange/Outlook support
- VPN setup
- System and product support: Windows 10, Windows 11, Office 2019, Office 365, Active Directory, TeamViewer, RSA VPN, Microsoft Teams, RSA Security Console, Deep Discovery Mail Inspector, ServiceNow, Macmon
Peter Weileder
Last position:
ISO 27001 Auditor for health insurance archive system at Health insurance company
The replacement of the existing archive system (document management system – DMS) on a host-based platform is well advanced.
The internal audit is meant to ensure the company's quality standards.
GDPR
ISO 27001 ff.
BSI
DORA
Patient data regulations
Host / Cloud / S3 / Container / highly scalable / Nuxeo
Budget: 50,000
Team: 1
Martin Gross
Last position:
Product Management for Medical Portal at MedTech Startup
- Product strategy and roadmap development for digital health portal
- Requirements engineering and feature prioritization
- User story definition and backlog management
- Prototype development
- Implementation of continuous delivery
- Search engine optimization
- Technological environment: Claude Code, Claude Sonnet 4.5, Agentic Coding, TypeScript, React, AstroJS, PostgreSQL, JetBrains IntelliJ, Netlify, Supabase, GitHub Actions, Git, DevOps, continuous delivery
Axel Bock
Last position:
Project lead for introducing Okta as an IAM system at Fritz Schäger GmbH & Co KG
- Project management
- Building an internal IAM team
- Okta
- Project management
- IAM processes
Hassan El Aboubi
Last position:
SAP Authorization Consultant at msg/Denios
- Support for the DENIOS S/4HANA greenfield transformation. - Role development based on the organizational model and structure. - Creation of roles based on process and steps in swimlanes. - Derivation of catalogs, spaces, pages and sections from process IDs. - User assignment via the organizational structure. - Authorization administration in the S/4HANA landscape with a Fiori-first approach. - Consulting and development in the S/4HANA greenfield area.
Samir Soliman
Last position:
Project Manager in the Cybersecurity Department at RWE AG
- Implementation of the new Group Cybersecurity Strategy based on the NIST Cybersecurity Framework
- Managing, coaching, and guiding the operational companies in their cybersecurity status quo analysis according to the NIST CSF methodology
- Gap analysis against the industry benchmark and target maturity level
- Client: CISO of RWE AG
Salman Virk
Last position:
Network Rollout Coordinator at Bechtle Managed Service
- Scheduling for customers and technicians
- Carrying out assessments / inventory of hardware and internet lines
- Line testing for provider change
- Commissioning / technician support for installation of Fortinet firewall and switch
- Setting up peripherals, VPN testing with customers
- User support
Discover over 15,000 top freelancers
Statistics of experts using Identity and Access Management
Aggregated from the professional profiles of matched freelancers.
Experience
19 years
Position duration
1.8 years (Germany: 2.2 years)
Positions per freelancer
15 (Germany: 13)
Top business areas
Information Technology, Operations, Project Management
Top industries
Banking and Finance, Information Technology, Healthcare
Certification focus areas
Information Technology, Project Management, Product Development
Bachelor's degree or higher
86%
Master's degree or higher
64% (Germany: 54%)
Certifications per freelancer
6 (Germany: 4)
Most common languages
German, English, French
Speak two or more languages
94% (Germany: 96%)
Based on our profile pool as of 30 Aug 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Frankfurt are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Frankfurt using Identity and Access Management
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 30 Aug 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
About the technology
IAM basics
Identity and Access Management, or IAM, controls who can sign in, what they can reach, and how access is granted or removed. It sits at the center of secure enterprise software, cloud estates, and internal tools. Strong work here keeps access simple for users and strict for security teams.
Typical work
- SSO and MFA setup
- Role and policy design
- User lifecycle and provisioning flows
- Federation with external identity providers
- Access reviews and audit support
IAM specialists build the rules and integrations that make these flows reliable across apps, APIs, and cloud services.
Ecosystem
Common work spans Okta, Microsoft Entra ID, Ping Identity, Keycloak, Azure AD, and directory services such as Active Directory and LDAP. In Frankfurt, this often touches finance, logistics, and enterprise shared services where access control must fit many systems. Good specialists know how to keep identity consistent across teams and environments.
When to bring help
Companies usually call in freelance expertise when IAM work is urgent, cross-system, or tied to a migration. That includes SSO rollouts, MFA changes, cloud moves, directory cleanup, or replacing legacy login flows. A strong specialist can reduce risk without slowing delivery.
What strong specialists do
Strong IAM professionals think in policies, identities, and trust boundaries, not just screens and settings. They document roles clearly, test edge cases, and handle recovery paths for locked-out users, service accounts, and external partners. They also work well with security, infrastructure, and application teams.
Delivery focus
For a clean outcome, the work should end with clear access rules, stable integrations, and audit-ready documentation. Depending on the setup, that may include login journeys, federation setup, provisioning logic, and operational handover. The best experts make IAM easier to run after launch, not harder.
Frequently asked questions
Not sure where to start with Identity and Access Management? These answers cover the essentials.
Identity and Access Management covers how users, services, and partners prove who they are and what they may access. It includes login flows, single sign-on, multi-factor authentication, provisioning, deprovisioning, and role-based access. In practice, it is the control layer between people and systems.
A strong Identity and Access Management specialist is useful when the work spans several applications, cloud services, or user groups. That is common during SSO rollout, MFA changes, directory cleanup, or migration from a legacy login setup. A generalist can help with parts of the job, but IAM issues often need deeper policy and integration knowledge.
Identity and Access Management is the broader discipline, while SSO, MFA, and access control are parts of it. SSO focuses on one login for many apps, MFA adds a second proof of identity, and access control decides what a user can do after sign-in. IAM ties those pieces together into one operating model.
Identity and Access Management projects often involve Okta, Microsoft Entra ID, Ping Identity, Keycloak, Active Directory, LDAP, and SAML or OpenID Connect integrations. The right specialist should also understand cloud identity, directory sync, and user provisioning. Tool choice matters, but the quality of the identity model matters more.
A strong Identity and Access Management professional usually knows security basics, cloud platforms, directory services, and API integration. Experience with SAML, OAuth, OpenID Connect, and SCIM is often important. Communication also matters because IAM work affects security, IT operations, and application owners at the same time.
A Identity and Access Management expert can often start with a clear view of your systems, user groups, and target login flows. They will want to know which apps are in scope, who owns identity data, and whether the change affects employees, partners, or customers. The more complete the current-state picture, the faster the work moves.
Most Identity and Access Management work can be done remotely because the core tasks are design, configuration, testing, and documentation. On-site time in Frankfurt can help during workshops, access reviews, or sensitive rollout phases with security and infrastructure teams. Many projects use a mixed setup.
A good Identity and Access Management specialist explains trade-offs clearly and asks precise questions about trust, lifecycle, and recovery. Look for evidence of SSO, MFA, federation, provisioning, and audit support in real project work. Strong experts also think beyond the first login and plan for exceptions, support, and handover.
The average hourly rate of freelancers in Frankfurt, Germany who have used Identity and Access Management in their recent projects is 111 €, which corresponds to a daily rate of about 887 € based on an 8-hour working day.
Of the freelancers in Frankfurt, Germany who have used Identity and Access Management in their recent projects, 86% hold at least a Bachelor's degree and 64% hold at least a Master's degree.
On average, freelancers in Frankfurt, Germany who have used Identity and Access Management in their recent projects have 19 years of professional experience, with a single engagement typically lasting around 1.8 years.
The most common languages among freelancers in Frankfurt, Germany who have used Identity and Access Management in their recent projects are German (94%), English (94%), and French (17%).
The most common industries among freelancers in Frankfurt, Germany who have used Identity and Access Management in their recent projects are Banking and Finance (94%), Information Technology (89%), and Healthcare (50%).
The most common business areas among freelancers in Frankfurt, Germany who have used Identity and Access Management in their recent projects are Information Technology (100%), Operations (78%), and Project Management (78%).
Main locations of FRATCH Experts, who have recently used Identity and Access Management
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg 
Munich 
Cologne 
Stuttgart 
Dusseldorf 
Essen 
Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
