Senior Security Engineer – Identity and Access Management (IDAM)

The role involves working for a leading financial institution based in Kraków, focusing on the transformation of global Identity and Access Management (IDAM) platforms and the adoption of Zero Trust security principles.

• Minimum 5 years of experience in Information Security Engineering, focusing on IAM, security controls, and cloud environments.
• Expertise in Zero Trust architecture, authentication, and authorization solutions.
• Proficiency with PKI, secrets management, cryptography, and security for GCP and Kubernetes.
• Experience implementing Policy-as-Code (OPA), threat modeling, vulnerability management, and security monitoring.
• Strong understanding of DevSecOps practices, secure software lifecycle, and incident response.
• Ability to produce comprehensive security documentation and operational procedures.

Nice to have:

• Certifications related to security (e.g., CISSP, CISA).
• Experience with service mesh security, API security, and security compliance frameworks.

• Design and implement security controls across the IDAM 2.0 platform, embedding Secure by Design principles.
• Configure and maintain authentication and authorization mechanisms, including cloud security on GCP and Kubernetes.
• Support and operationalize Workload, Human, and Agent Identity security controls using cryptographic key management and PKI.
• Develop and maintain security standards, baselines, and hardening guides; support vulnerability management.
• Conduct threat modeling, security risk assessments, and vulnerability reviews.
• Collaborate with Security Operations, Incident Response teams, and third-party vendors during security events and audits.
• Support DevSecOps practices with tooling, automated security testing, and secure software delivery.

Only candidates with an existing legal right to work in the European Union will be considered for this role.