Software Engineer · IAM Consultant

Martin Klima

Identity & Access Management, software development, and IT consulting. SailPoint IdentityIQ, Oracle Identity Governance, Microsoft Identity Manager, Entra ID, Azure AD Connect, Java EE, and open-source — Prague, open to project work.

SailPoint 8.4 · OIG 12c · MIM Entra ID · AAD Connect Java EE · Tomcat · Apache RBAC · OAuth2 · SSO
About

Software development and IAM consulting

Experienced Software Engineer with a strong background in Identity & Access Management, cybersecurity, architecture, java and web development. Implementation and customization of IGA platforms — custom workflows, forms, connectors, application onboarding, REST integrations, role-based access control and provisioning — using Java EE, Spring Boot, Vaadin, Apache Tomcat, WildFly and JBoss.

Hands-on experience: SailPoint IdentityIQ 8.4, Oracle Identity Governance 12c, Microsoft Identity Manager, WSO2 IDM, API Manager, MidPoint, Ping Identity, DirX Identity, OpenIAM, CyberArk PAM, Microsoft Entra ID, Azure AD Connect and Active Directory / LDAP.

Based in Prague and available for full-time engagements.

Links: softwarecraft.cz · LinkedIn

Overview
Strengths
Identity & Access Management
Software Engineering
Architecture
Web Development
Project Management
Industries Technology · Pharma · Energy · Telco · Government · Insurance · Banking
Languages English · German · Czech
Stack

Technologies

More here: softwarecraft.cz/about

IAM & identity governance

SailPoint IdentityIQ 8.4 Oracle Identity Governance 12c Microsoft Identity Manager WSO2 Identity Server WSO2 API Manager MidPoint Ping Identity DirX Identity / Audit / Directory OpenIAM CyberArk PAM Role-Based Access Control OAuth 2.0 / OIDC / SAML / SCIM / JWT SSO / MFA

Microsoft identity & cloud

Microsoft Entra ID Azure AD Azure AD Connect Active Directory / LDAP Microsoft Azure Amazon Web Services Microsoft Graph API Windows Server PowerShell

Java & application servers

Java / Java EE Spring Boot Apache Tomcat Apache HTTP Server WildFly / JBoss Vaadin Hibernate / CDI / EJB Docker

Platforms & databases

Ubuntu / Debian / CentOS / Linux Windows Server / Windows 10 Android Oracle Microsoft SQL Server MySQL / PostgreSQL DB2 REST / SOAP / XML / JSON / HTTP / TLS SAP PI

Security & PKI

PKI / SSL / Let’s Encrypt AES / KMS / OpenPGP Fortify / WebInspect / OWASP ITIL

Build & delivery

Git / GitLab Maven / Ant JUnit / Eclipse IDE Mercurial Python / Bash C / C++ / C# SQL

Web Development

Bootstrap Vaadin Laravel Zend Framework HTML CSS JavaScript / jQuery PHP
Work

Experience

Senior Development Engineer · Aeven

Jan 2025 — Present · Prague, Copenhagen

Development and management of IAM system for Nordic clients. Server entitlements, forms, custom workflows, Leaver, Joiner, Pre-Joiner, Mover, geo-restrictions, server automation and infrastructure.

SailPoint 8.4, IdentityIQ, Tomcat, OAuth 2.0, Azure AD / Entra ID, REST API, Microsoft Graph API, Active Directory, JDBC, Oracle DB

IAM Software Engineer · Novartis (HCLTech)

Sep 2022 — Dec 2024 · Prague

Novartis IAM project. IAM integration, application onboarding, process development, user self-service, role management, entitlements, provisioning and system integration.

Projects: Novartis Clinical Vault (NCV) — Veeva Vault, GX_MDD (Sandoz).

Oracle Identity Governance 12c, WildFly, Azure AD, Linux, PAM, CyberArk, LDAP, Active Directory, REST API Connector

IAM Consultant · Cognizant

Sep 2021 — Jan 2022 · Prague

Solution design and architecture for the MHWirth IAM separation from Aker Solutions. Identity management, migration plan, user management, workflow management, integrations.

Microsoft Identity Manager (MIM), Azure AD Connect, Windows Active Directory, Azure AD, Windows Server, PowerShell, Microsoft SQL Server

IT Consultant · E.ON Business Services

Dec 2018 — Jun 2021 · Prague

Development and implementation of a new central Identity Management solution for the E.ON CZ region.

Requirements gathering, solution architecture, project management, system integration, information security, java development, documentation, project delivery, go-live, operations hand-over.

WSO2 Identity Server, WSO2 API Manager, MidPoint, Ping Identity, Azure Cloud, SAP PI, Spring Boot, Apache, Tomcat, Docker, Active Directory, LDAP, Java 8, OAuth2, PKI

Software Development Engineer · Gemalto

Sep 2017 — Oct 2018 · Prague

UK ePassports — new passport production solution for Her Majesty’s Passport Office. Denmark eTacho — migration of the chip-card production service for Rigspolitiet, including a legacy migration and a new electronic order stream.

Customer requirements analysis, development, testing, internal security requirements and system architecture. Encryption (AES), PKI, KMS, Fortify, WebInspect, OWASP, password policy, SQL injection and session management.

Java EE, Spring Boot, Vaadin, CDI, web services, WildFly, Weld, Quartz, Hibernate, Shiro, Maven, Mercurial, JUnit, Oracle, MySQL

Atos IT Solutions and Services

J2EE Developer
Sep 2016 — Sep 2017 · Prague

Development of MPSV CZ information systems.

J2EE, EJB, web services, RMI, JBoss, SOAP, Maven, MSSQL

IDM Support and Operations
Apr 2016 — Sep 2016 · Adliswil, Zurich

Swiss Re IDM. Incidents handling, ITIL, 24/7 on-call, sync workflows, role-change and deployment support.

IDM Consultant
Oct 2014 — Sep 2016 · Prague

IDM implementation and support for CZ, SK and CH. Provisioning, access management, workflows, ITIL.

Products: DirX Identity, DirX Audit and DirX Directory

Study

Education

2010 — 2017
Master’s degree, Applied Informatics
University of South Bohemia, České Budějovice
2014 — 2017
Information Systems and Technology
University of Economics, Prague
2013 — 2014
Applied Informatics
Universität Rostock — web applications, parallel programming, networks & security
Languages: Czech (native or bilingual) · English (full professional) · German (professional working) · French (elementary)
Proof

Certifications

Windows Server Administration Java Spring & Spring Boot Framework CCNA 1 Introduction to Networking CCNA 2 Routing and Switching IT Essentials: PC Hardware and Software TOEFL
Contact

Let’s talk IAM or a build

Open for projects and urgent consulting.