Senior Cyber Security Specialist - Authenticator Management (m/f/d)

WELCOME TO BASF

At BASF, we enable secure, modern and user-friendly authentication across our global enterprise. Our team provides reliable login capabilities for business-critical applications across cloud and on-premises environments based on one federated identity. 

We are responsible for authentication technologies such as Smartcards, Windows Hello for Business and FIDO2, ensuring secure access for employees and administrators worldwide. As a core part of BASF's Cyber Security and Identity & Access Management landscape, we are driving the adoption of phishing-resistant and passwordless authentication technologies that strengthen security while improving user experience. 

To strengthen our team in Madrid, we are looking for a Senior Cyber Security Engineer who combines technical expertise, hands-on engineering and architectural thinking to help shape the future of authentication at one of the world's leading chemical companies. 

RESPONSIBILITIES

As a Senior Cyber Security Engineer, you will take ownership of BASF's authenticator ecosystem and play a key role in advancing modern, secure and scalable authentication services. 

Your responsibilities will include: 

• Own and drive BASF's authenticator ecosystem, including Smartcard Management, Smartcards, Windows Hello for Business and FIDO2 
• Drive the evolution of phishing-resistant and passwordless authentication as part of BASF's global Identity
  Security strategy 
• Define and execute technical roadmaps aligned with Zero Trust principles and long-term security objectives 
• Influence authentication architecture decisions, technology standards and future platform capabilities while remaining actively involved in engineering and implementation activities 
• Act as the technical expert for certificate-based authentication, authenticator lifecycle management and modern MFA technologies 
• Design, implement and continuously improve authentication solutions with a strong focus on security, user experience, scalability, reliability and cost efficiency 
• Actively configure, integrate and optimize authentication platforms, infrastructure components, client software and backend services in a complex enterprise environment 
• Own the operational stability of the platform through hands-on administration, upgrades, rollouts, vulnerability remediation and lifecycle management activities 
• Lead troubleshooting activities for complex technical issues and major incidents, driving root cause analysis and sustainable improvements 
• Collaborate closely with Product Managers, Product Owners, Architects, Cyber Security experts, infrastructure teams and business stakeholders 
• Manage technical relationships with vendors and service providers, including service improvements and roadmap discussions 
• Evaluate emerging technologies and trends such as FIDO2, passkeys, post-quantum cryptography and AI-supported operations 
• Mentor junior team members and contribute to a culture of technical excellence, innovation and continuous learning 
• Contribute to agile delivery processes including backlog refinement, sprint planning and retrospectives 

QUALIFICATIONS

• Bachelor's or master’s degree in computer science, Cyber Security or a comparable qualification, or equivalent professional experience.
• 7+ years of experience in IT, Cyber Security, IAM or authentication-related domains.
• Strong expertise in authentication technologies such as Smartcards, FIDO2, Windows Hello for Business, MFA and certificate-based authentication. 
• Solid understanding of PKI, certificates and public/private key cryptography.
• Strong hands-on engineering mindset with proven experience implementing, operating and troubleshooting enterprise authentication solutions.
• Experience with enterprise-scale authentication architectures and business-critical security services.
• Strong knowledge of Windows client/server environments and backend technologies, including SQL.
• Proven experience managing complex technical issues and major incidents.
• Experience driving technical roadmaps, service evolution or architecture improvements.
• Familiarity with agile ways of working and tools such as Azure DevOps.
• Strong communication, collaboration and stakeholder management skills.
• Ability to work independently, take ownership and drive topics from concept to implementation.
• Excellent written and spoken English.

NICE TO HAVE

• Experience with IAM platforms, SSO and federation technologies (e.g. Entra ID).
• Knowledge of Zero Trust architecture and modern identity security concepts.
• Experience with automation, scripting or Infrastructure-as-Code.
• Experience with AI-supported operations and service optimization.
• Understanding of regulatory, audit and compliance requirements.
• Experience working in international and distributed teams. 

WHAT WE OFFER

• A secure work environment because your health, safety and wellbeing is always our top priority.
• Flexible work schedule and Home-office options, so that you can balance your working life and private life.
• Learning and development opportunities
• 25 holiday days per year
• 5 additional days (readjustment)
• A collaborative, trustful and innovative work environment
• Being part of an international team and work in global projects
• Relocation assistance to Madrid provided

At BASF, the chemistry is right

Because we are counting on innovative solutions, sustainable actions, connected thinking and on you, become a part of our formula for success and develop the future with us - in a global team that embraces diversity and equal opportunities irrespective of gender, age, origin, sexual orientation, disability or belief.At BASF, we are committed to upholding and ensuring compliance with company standards related to quality, environment, health, safety, and energy, in line with our global guidelines.We actively promote a culture of prevention and continuous improvement, encouraging collaboration in initiatives related to quality, environmental protection, health, safety, and energy performance.We foster responsible energy use, promoting efficiency in daily operations and supporting the identification of improvement projects and energy-saving opportunities