IAM Engineer

Antal is a leading recruitment and HR advisory company present in Poland since 1996, also active in the Czech Republic and Hungary. It employs around 150 professionals across the CEE region offering services including specialist and executive recruitment, employee outsourcing, HR consulting, employer branding, and market research. Antal operates with a division-based structure combining deep industry expertise with functional specialization to provide tailored solutions for companies in every sector.

• 3–5+ years of experience in Identity & Access Management or Identity Infrastructure.
• Hands-on experience administering Enterprise Public Key Infrastructure (PKI).
• Strong knowledge of Microsoft Active Directory (AD DS, GPO, LDAP, Kerberos).
• Experience with Microsoft Entra ID including SSO, Conditional Access, and Identity Governance.
• Practical experience with Active Directory Certificate Services (AD CS).
• Strong understanding of X.509 certificates, SSL/TLS, client certificates, and code signing.
• Experience managing CRL, OCSP, certificate auto-enrollment, and lifecycle management.
• Experience integrating PKI with Intune, MDM platforms, VPN, Wi-Fi (802.1X), enterprise applications, and authentication protocols such as SAML, OIDC, and mTLS.
• PowerShell scripting experience for AD and PKI administration.
• Basic knowledge of APIs and process automation.
• Understanding of security frameworks such as ISO 27001, NIST, and Zero Trust architecture.
• Good understanding of security risks related to Identity and PKI technologies.

Nice to have:

• Experience with ITSM platforms such as ServiceNow.
• Knowledge of Azure DevOps or similar documentation platforms.
• Experience with identity automation and scripting.
• Familiarity with modern authentication technologies and passwordless solutions.

• Design, implement, and maintain enterprise PKI infrastructure including Certificate Authorities and trust chains.
• Manage certificate lifecycle: issuance, renewal, revocation, and monitoring.
• Integrate PKI services with Microsoft Active Directory, Microsoft Entra ID, Intune, endpoint devices, and enterprise applications.
• Maintain and enhance certificate auto-enrollment and certificate-based authentication services.
• Support Zero Trust initiatives such as passwordless authentication and device trust.
• Configure and maintain CRL, OCSP, and other PKI security mechanisms.
• Troubleshoot and resolve incidents related to identity, authentication, and digital certificates.
• Develop and maintain technical documentation and operational procedures.
• Collaborate with cross-functional teams including Information Security, Endpoint Management, Networking, and Infrastructure.
• Contribute to automation and continuous improvement of IAM and PKI processes.