AI-Augmented IAM Security Engineer

EPAM Systems is a global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, EPAM empowers clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.

• Bachelor's degree in Computer Science, Cybersecurity, Engineering or equivalent practical experience.
• 2+ years hands-on experience with Identity and Access Management solutions.
• Experience with at least one enterprise IAM, IGA, PAM, or federation platform.
• Understanding of IAM concepts including identity lifecycle, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege, and privileged access.
• Knowledge of IAM protocols and standards such as SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, and Kerberos.
• Experience configuring IAM controls, policies, connectors, and access governance workflows.
• Working knowledge of cloud IAM concepts across major platforms like Azure, AWS, or GCP.
• Scripting and automation experience using at least one of PowerShell, Python, Bash, REST APIs, SCIM, or Terraform.
• Ability to collaborate with developers, architects, infrastructure engineers, security operations, compliance teams, and business stakeholders.
• Competency in following, maintaining, and improving defined IAM and security processes.
• Practical understanding of AI-assisted productivity and automation including AI agents, LLM integration, prompt engineering, and secure AI tool usage.
• Good communication skills to explain IAM issues and technical decisions to technical and non-technical stakeholders.

Nice to have:

• Familiarity with IAM platforms such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, ForgeRock, Auth0, SailPoint, Saviynt, or CyberArk.
• Experience with CIAM, B2B/B2C identity, external identity or partner access scenarios, and SIEM/SOAR integrations.
• Experience with CI/CD-based IAM deployment, configuration-as-code, and automated testing.
• Familiarity with AI/LLM platforms and frameworks such as Azure OpenAI, Amazon Bedrock, Microsoft Copilot Studio, LangChain, AutoGen, or Power Automate.
• Understanding of AI security risks, including data leakage, prompt injection, excessive agency, insecure tool use, model governance, and sensitive identity data exposure.
• Certifications like SC-300, Okta Certified Professional/Administrator/Consultant, SailPoint, Saviynt, CyberArk, Ping Identity, CISSP, CISM, CISA, CCSK, CCSP, SSCP, AI-900, or AWS Certified AI Practitioner.

• Implement, configure and operate IAM solutions based on defined architecture and designs.
• Maintain identity lifecycle processes including automated provisioning and deprovisioning.
• Configure core IAM capabilities such as SSO, federation, MFA, passwordless authentication, conditional access, RBAC/ABAC role models, and least-privilege access.
• Develop and deploy IAM integrations and connectors with cloud platforms, SaaS applications, enterprise systems, directories, source systems, databases, and APIs.
• Execute access certification and review campaigns, perform entitlement clean-up, and configure segregation-of-duties (SoD) rules.
• Operate Privileged Access Management controls including credential vaulting, secrets rotation, session management, just-in-time and just-enough access.
• Develop automation scripts and IAM tooling using PowerShell, Python, REST APIs, SCIM, Terraform or similar.
• Monitor IAM platform health, troubleshoot incidents, perform patching, upgrades, and configuration hardening.
• Maintain IAM logging, alerting, monitoring, and run backup and recovery procedures.
• Deploy AI-assisted automations and agentic workflows for daily IAM operations.
• Integrate AI agents and LLM-backed automations into IAM systems via function calling, SCIM, REST, and webhooks.
• Develop and maintain reusable prompts, structured-prompting patterns, and prompt templates for IAM AI assistants.
• Implement output verification, human-in-the-loop approval gates, and rollback paths for AI-assisted IAM workflows.
• Implement security and privacy controls for AI usage including least-privilege access, secrets handling, prompt-injection resistance, redaction, and auditability.
• Monitor AI-assisted automation accuracy and impact, continuously tune prompts and tools, and produce operational documentation while supporting audits.

Klikając w przycisk „Aplikuj” lub w inny sposób wysyłając zgłoszenie rekrutacyjne, zgadzasz się na przetwarzanie Twoich danych osobowych przez EPAM Systems (Poland) sp. z o.o. z siedzibą w: Fabryczna 1A, 31-553 Kraków (Pracodawca), jako administratora danych osobowych w celu przeprowadzenia rekrutacji na stanowisko wskazane w ogłoszeniu zgodnie Polityką Prywatności dostępną na stronie: .