EPAM Systems

AI-Augmented IAM Security Engineer

Brak informacji o wynagrodzeniu

MidZdalnie·KrakówFull-time

#463612·Dodano 14 dni temu·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Identity and Access ManagementSSOSAML OAuth 2.0OpenId ConnectPrivileged Access ManagementSCIMPowershell

Podsumowanie oferty

Implement and operate enterprise Identity and Access Management (IAM) solutions, including identity lifecycle processes, integrations, and access controls. Build AI-assisted automations and agentic workflows for daily IAM operations, integrating AI agents and LLMs with IAM systems and operational tools.

Wymagania

Bachelor's degree in Computer Science, Cybersecurity, Engineering or equivalent practical experience.
At least 2 years of hands-on experience implementing or operating Identity and Access Management (IAM) solutions.
Experience with at least one enterprise IAM, IGA, PAM or federation platform.
Understanding of identity lifecycle, authentication and authorization, SSO, federation, MFA, RBAC/ABAC, least privilege and privileged access.
Knowledge of SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP and Kerberos.
Experience configuring IAM controls, policies, connectors and access governance workflows.
Working knowledge of cloud IAM concepts across at least one major cloud platform, such as Azure, AWS or GCP.
Scripting and automation experience using at least one of PowerShell, Python, Bash, REST APIs, SCIM or Terraform.
Ability to work closely with developers, architects, infrastructure engineers, security operations, compliance teams and business stakeholders.
Ability to follow, maintain and improve defined IAM and security processes, execute changes from tickets, runbooks and designs, and escalate design-level questions.
Practical understanding of AI-assisted productivity and automation beyond basic chatbot usage, including building AI agents, automating repetitive IAM tasks, integrating LLMs with tools and documents, prompt engineering and securely using AI tools with awareness of sensitive identity data.
Good communication skills and ability to explain IAM issues, technical decisions and remediation steps to technical and non-technical stakeholders.

Nice to have:

Familiarity with Microsoft Entra ID, Active Directory, Okta, Ping Identity, ForgeRock, Auth0, SailPoint, Saviynt or CyberArk.
Experience with CIAM, B2B/B2C identity, customer identity, external identity or partner access scenarios, and SIEM/SOAR integrations for IAM monitoring, alerting and automated response.
Experience with CI/CD-based IAM deployment, configuration-as-code and automated testing of IAM changes.
Familiarity with AI/LLM platforms or frameworks such as Azure OpenAI, Amazon Bedrock, Microsoft Copilot Studio, LangChain, AutoGen or Power Automate.
Understanding of AI security risks, including data leakage, prompt injection, excessive agency, insecure tool use, model governance and sensitive identity data exposure.
SC-300, Okta, SailPoint, Saviynt, CyberArk or Ping Identity certifications, or CISSP, CISM, CISA, CCSK, CCSP, SSCP, AI-900 or AWS Certified AI Practitioner.

Obowiązki

Responsibilities:

Implement, configure and operate IAM solutions and controls based on designs and standards set by IAM architects and security leadership.
Maintain identity lifecycle (Joiner / Mover / Leaver) processes, including automated provisioning and deprovisioning across target systems.
Configure SSO, federation, MFA, passwordless authentication, conditional access, RBAC/ABAC role models and least-privilege access.
Develop and deploy IAM integrations and connectors with cloud platforms, SaaS applications, enterprise systems, directories, databases and APIs.
Execute access certification and review campaigns, perform entitlement clean-up and configure segregation-of-duties (SoD) rules.
Operate Privileged Access Management (PAM) controls, including credential vaulting, secrets rotation, session management and just-in-time and just-enough access.
Develop automation scripts, workflows and IAM tooling using PowerShell, Python, REST APIs, SCIM, Terraform or similar technologies.
Monitor IAM platform health; troubleshoot and resolve incidents and access issues; and perform patching, upgrades and configuration hardening.
Maintain IAM logging, alerting and monitoring, and run backup and recovery procedures according to defined runbooks and resilience requirements.
Deploy AI-assisted automations and agentic workflows for tasks such as access request triage, entitlement analysis, anomaly detection, root-cause analysis, privileged access review support, compliance evidence collection and documentation generation.
Integrate AI agents and LLM-backed automations into IAM systems and operational pipelines, connecting models to internal tools, APIs, directories, ticketing and IAM platforms via function calling, SCIM, REST and webhooks.
Develop and maintain reusable prompts and prompt templates, and implement retrieval over IAM policies, role catalogs, runbooks and documentation, such as RAG.
Implement output verification, human-in-the-loop approval gates and rollback paths so AI-driven changes do not reach production access without review.
Implement security and privacy controls for IAM AI usage, including least-privilege agent access, secrets and credential handling, prompt-injection resistance, sensitive identity data redaction and auditability of AI-driven actions.
Monitor AI-assisted IAM automations in production, measure their accuracy and impact, tune prompts, tools and workflows, produce operational documentation and support audits and compliance evidence requests.

Benefity

Career development programs, thought leadership, mentoring, soft skills and well-being programs.
Certifications including Anthropic, Gemini, GCP, Azure and AWS.
English classes.
Participation in the Employee Stock Purchase Plan with a 15% discount.
Benefits package including health insurance, multisport and shopping vouchers.
Referral bonuses up to $2,000.
Offices with entertainment and relaxation zones, table tennis, football, free snacks and coffee.
Corporate, social and well-being events.
Business-driven relocation opportunities.

Pakiet relokacyjny

Kursy językowe

Udziały pracownicze

Ubezpieczenie

Karta sportowa

Premie

Darmowe przekąski

Napoje w biurze

Spotkania integracyjne

Inne informacje

Remote work is available within Poland; working abroad is possible for up to 60 days annually.

EPAM Systems

1668 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz