AI-Augmented IAM Security Engineer

EPAM is a global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, they empower clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.

• Bachelor's degree in Computer Science, Cybersecurity, Engineering or equivalent practical experience
• 2+ years hands-on experience with Identity and Access Management solutions
• Experience with at least one enterprise IAM, Identity Governance and Administration (IGA), Privileged Access Management (PAM) or federation platform
• Understanding of IAM concepts including identity lifecycle, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege, and privileged access
• Knowledge of IAM protocols and standards such as SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, and Kerberos
• Experience configuring IAM controls, policies, connectors, and access governance workflows
• Working knowledge of cloud IAM concepts on platforms like Azure, AWS, or GCP
• Scripting and automation experience using PowerShell, Python, Bash, REST APIs, SCIM, or Terraform
• Ability to collaborate with developers, architects, infrastructure engineers, security operations, compliance teams, and business stakeholders
• Competence in following and improving IAM and security processes, executing changes from tickets and runbooks
• Practical understanding of AI-assisted productivity, building AI agents, integrating LLMs, prompt engineering, and secure use with sensitive identity data
• Good communication skills to explain IAM issues and technical decisions to technical and non-technical audiences

• Implement, configure, and operate IAM solutions based on architect-defined standards
• Maintain identity lifecycle processes, including automated provisioning and deprovisioning
• Configure core IAM capabilities including SSO, federation, MFA, passwordless authentication, conditional access, and role models
• Develop and deploy IAM integrations and connectors with cloud platforms, SaaS applications, and enterprise systems
• Execute access certification, entitlement clean-up, and configure segregation-of-duties rules
• Operate Privileged Access Management controls including credential vaulting and session management
• Develop automation scripts, workflows, and tooling using PowerShell, Python, REST APIs, SCIM, Terraform
• Monitor IAM platform health, troubleshoot incidents, and perform patching and upgrades
• Maintain IAM logging, alerting, monitoring, and run backup and recovery procedures
• Deploy AI-assisted automations reducing manual effort in IAM daily operations
• Integrate AI agents and LLM-backed automations into IAM systems and pipelines
• Develop and maintain reusable prompts and implement retrieval over IAM policies and documentation
• Implement output verification, human-in-the-loop approvals, and rollback paths for AI-assisted workflows
• Implement security and privacy controls for AI usage within IAM
• Monitor AI-assisted automations in production and produce operational documentation

By applying, candidates consent to the processing of their personal data by EPAM Systems (Poland) sp. z o.o. for recruitment purposes according to the Privacy Policy.