IAM Engineer (Identity and Access Management)

• Strong English communication skills.
• 2-5 years of experience in IAM, with at least 2 years focused on access governance, entitlement reviews, or SSO integration.
• Previous experience with any enterprise IGA platform (ConductorOne, SailPoint, Saviynt, or Oracle Identity Governance) including configuring connectors, onboarding applications, and implementing access certification workflows.
• Experience integrating applications with enterprise SSO solutions using SAML, OIDC, or OAuth2 protocols.
• Solid understanding of Role-Based Access Control (RBAC) concepts, entitlement lifecycle, and application to automated provisioning, de-provisioning, and access modeling.
• Ability to gather, analyze, and document technical and business requirements to support IAM processes such as role mining, access policy definition, and entitlement rationalization.
• Familiarity with regulatory frameworks such as SOX, ISO 27001, NIST, or GLBA and their influence on identity lifecycle and access governance.
• Experience using tools such as Excel, Visio, and Confluence to create process flows, data maps, and documentation.
• Highly organized and detail-oriented with ability to manage multiple application onboarding and integration efforts.

Nice to have:

• Experience contributing to enterprise-scale entitlement review campaigns, including remediation strategies and audit response preparation.
• Scripting or programming for IAM automation and data transformation using languages such as Python or Golang, and tools like SQL or PowerShell.
• Experience in the financial industry and familiarity with regulatory frameworks (e.g., SOX, GLBA, FFIEC).

• Support the implementation of access certification processes within the IGA platform (e.g., SailPoint, Saviynt) for periodic entitlement reviews.
• Contribute to integration of applications with Single Sign-On (SSO) using identity federation protocols such as SAML, OIDC, and OAuth2, collaborating with application teams and security architects.
• Work closely with IAM architects and application teams to onboard applications into the IGA platform, ensuring accurate mapping and configuration of entitlement data, user attributes, and provisioning rules.
• Analyze access patterns and application entitlements to assist in role mining, entitlement rationalization, and development of scalable, governance-aligned role models.
• Document technical specifications, data mappings, and integration workflows for SSO and IGA implementations, supporting technical teams and audits.
• Configure and maintain integrations between target systems and the IGA platform, ensuring lifecycle management of users and entitlements.
• Assist in creation of access policies and role definitions aligned with business and compliance requirements.
• Generate reports and provide evidence for audit activities including entitlement reviews, access request histories, and policy enforcement logs.
• Identify technical gaps or inconsistencies in access controls, provisioning workflows, or entitlement structures and propose engineering solutions.
• Participate in testing, validation, and deployment of IAM-related changes ensuring proper functionality across SSO and IGA components.
• Provide technical support and knowledge sharing around IAM integration processes and access governance best practices.

Please note that the required overlap with the US team is until at least 2:00 PM ET (8 PM CET in Poland).