Senior IAM Security Engineer

This is a fully remote position, open to applicants in Poland, +4 more countries.

📋 Description

• Design, develop, and sustain secure and scalable identity and access management solutions.

• Integrate IAM services throughout enterprise systems.

• Automate access lifecycle processes to guarantee efficient and secure access management.

• Architect and implement IAM-related integrations utilizing SCIM, SAML, OAuth, OIDC, and APIs.

• Spearhead the automation of access lifecycle management processes.

• Create and implement RBAC/ABAC models across enterprise systems.

• Diagnose and resolve intricate IAM-related incidents.

• Incorporate IAM services into CI/CD and Infrastructure-as-Code workflows.

• Offer technical expertise during identity-related investigations.

• Establish secure configuration standards for IAM platforms.

• Produce and maintain high-quality technical documentation.

⛳️ Requirements

• Advanced practical knowledge in identity federation and modern authentication/authorization protocols (SAML 2.0, OAuth 2.0, OpenID Connect).

• Extensive hands-on experience with Keycloak administration and configuration, encompassing realm management, client configuration, role mapping, identity brokering, and custom authentication flows.

• Demonstrated ability to design, construct, and optimize Joiner/Mover/Leaver (JML) workflows using Adaxes or similar tools, including automation rules, business logic, and approval flows.

• Robust understanding of RBAC/ABAC implementation patterns.

• Experience in designing and implementing secure API integrations (REST APIs, token-based authentication, service-to-service communication).

• Advanced troubleshooting and debugging skills across IAM ecosystems.

• Strong automation and scripting abilities, e.g., PowerShell, Python, Bash.

• Capability to translate security requirements into scalable IAM solutions.

• Profound knowledge of IAM architecture patterns and federation models.

• In-depth understanding of authentication flows, token lifecycle management, and access control enforcement mechanisms.

• Familiarity with identity lifecycle orchestration patterns and directory service integrations, such as Active Directory.

• Knowledge of PAM integration and privileged access governance concepts.

• Over 3 years of experience in IAM or security engineering roles within enterprise environments.

• Proven hands-on experience in administering and engineering solutions on the Keycloak platform, including realm design, client configuration, identity brokering, custom authentication flows, role mapping, and token management.

• Experience in designing and implementing secure IAM integrations using APIs and federation protocols (SAML 2.0, OAuth 2.0, OpenID Connect).

• Hands-on experience in building and optimizing automated Joiner/Mover/Leaver (JML) workflows using Adaxes, including approval logic and lifecycle orchestration.

• Proven track record of enhancing access lifecycle efficiency through automation and process redesign.

• Experience in troubleshooting complex IAM, SSO, and federation-related incidents.

• Experience in supporting identity-related security investigations and audit activities.

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.

🏝️ Benefits

• Private health insurance.

• Sports benefits.

• Comprehensive Mental Health Program.

• Free English lessons (online).

• Local language courses.

• Paid time off.

• Maternity leave support.

• Referral program rewards.

• Opportunities for upskilling, internal workshops, and participation in professional conferences and corporate events.