Identity Management Consultant

Freelance IAM & Secrets Management Engineer (m/f/d)

We’re looking for an experienced freelance engineer to support the development of a cloud‑native internal developer platform. You’ll work independently on IAM and secrets‑management capabilities that enable secure, scalable software delivery across a hybrid‑cloud environment.

Start :

Duration : 3 months initial contract

Place : Berlin, remote

Workload : 40h per week, full-time

Work set‑up : mostly remote up to 80%

Secrets Management & IAM

• Deep operational expertise with OpenBao / Vault
• Cluster lifecycle operations: init, unseal, upgrades, migrations, Raft consensus
• Snapshots, encrypted backups, DR processes, performance tuning
• Namespace and policy configuration, auth method management
• Troubleshooting issues such as seal events, Raft instability, and token/lease storms
• Terraform/OpenTofu for platform automation
• GitOps tooling (ArgoCD/Flux) and Helm deployments
• Kubernetes authentication and secret‑injection (Vault Agent, CSI driver, ESO)
• Service mesh alignment (mTLS, SPIFFE)

Observability

Monitoring & Troubleshooting

• Functional and integration testing across PKI, Secrets, IAM federation, CI/CD, HA/DR
• Monitoring telemetry, logs, and SIEM outputs; diagnosing issues in Vault/OpenBao, PKI, and Keycloak

What you bring:

Strong hands‑on experience with secrets platforms, Kubernetes, IaC, GitOps, and cloud‑native operations. You operate autonomously, solve complex problems, and collaborate effectively with platform teams.

Interested? Share your profile or portfolio — we’d be happy to connect