IAM Security Engineer – Senior

SOFTSWISS is expanding its team and is seeking an experienced IAM Security Engineer with strong expertise in identity and access management, IAM integrations, and access lifecycle automation.

• Advanced expertise in identity federation and modern authentication/authorization protocols (SAML 2.0, OAuth 2.0, OpenID Connect).
• Hands-on experience with Keycloak administration and configuration including realm management, client configuration, role mapping, identity brokering, and custom authentication flows.
• Proven ability to design, build, and optimize Joiner/Mover/Leaver (JML) workflows using Adaxes or analogs.
• Strong understanding of RBAC/ABAC implementation patterns.
• Experience designing and implementing secure API integrations (REST APIs, token-based authentication).
• Advanced troubleshooting and debugging capabilities across IAM ecosystems.
• Strong automation and scripting skills (e.g., PowerShell, Python, Bash).
• Ability to translate security requirements into scalable IAM solutions.
• Strong knowledge of IAM architecture patterns and federation models.
• Understanding of authentication flows, token lifecycle management, and access control enforcement mechanisms.
• Knowledge of identity lifecycle orchestration patterns and directory service integrations (e.g., Active Directory).
• Familiarity with PAM integration and privileged access governance concepts.
• 3+ years experience in IAM or security engineering roles in enterprise environments.
• Experience supporting identity-related security investigations and audit activities.
• Bachelor's or Master's degree in Computer Science, Information Security, or related field.
• Advanced security certifications preferred (e.g., CISSP, CIAM, vendor IAM certifications).

• Architect and implement IAM-related integrations using SCIM, SAML, OAuth, OIDC, and APIs.
• Lead automation of access lifecycle management processes.
• Design and implement RBAC/ABAC models across enterprise systems.
• Troubleshoot and resolve complex IAM-related incidents.
• Integrate IAM services into CI/CD and Infrastructure-as-Code workflows.
• Provide technical expertise during identity-related investigations.
• Define secure configuration standards for IAM platforms.
• Develop and maintain high-quality technical documentation.