ITDS

Design SME – Identity & Access Management

~21.7k - 26.1k PLN21 700 - 26 100 PLN/ mies./ mies.B2BB2B (netto)

Brak informacji o wynagrodzeniu

SeniorHybryda·KrakówFull-time·B2B·Umowa o pracę

#472640·Dodano 11 dni temu·1

Źródło: ITDS

Aplikuj teraz

Tech Stack / Keywords

CedarGCP Kubernetes OAuth2OIDCOPAPKISAMLSCIM

Podsumowanie oferty

Architect enterprise Identity and Access Management (IAM) for a global banking organisation undergoing a long-term transformation. Design secure, scalable identity services across authentication, authorisation, federation, and human, agent, and workload identities. The role covers GCP, Kubernetes, API security, and Zero Trust environments.

Wymagania

At least 8 years of experience in enterprise architecture, security architecture, or a related technical field.
Strong Identity and Access Management expertise, including authentication, authorisation, and identity federation.
Experience with OIDC, OAuth2, SAML, and SCIM.
Practical knowledge of Zero Trust Architecture, Agent Identity, and Workload Identity.
Expertise in GCP, Kubernetes, service mesh, API architecture, and API security.
Experience with event-driven architecture, messaging, asynchronous processing, and Policy-as-Code using OPA or Cedar.
Knowledge of PKI, certificates, secrets management, DevSecOps, and CI/CD.
Strong stakeholder management, technical leadership, architecture governance, and design review experience.

Nice to have:

Experience designing enterprise IAM solutions in large-scale banking or similarly complex environments.
Experience defining high availability, resilience, and disaster recovery architectures.
Experience evaluating technology and vendor products against strategic programme requirements.
Experience working with Enterprise Architecture, Product Owners, engineering teams, and external suppliers.

Obowiązki

Produce high- and low-level designs for enterprise identity capabilities.
Define end-to-end technical solutions across business, application, data, and infrastructure domains.
Design cloud-native IAM solutions for GCP and Kubernetes environments.
Develop architectures for authentication, authorisation, federation, API security, and service-to-service authentication.
Define Zero Trust, Policy-as-Code, secrets management, certificate lifecycle, and PKI integration patterns.
Design event-driven integrations, resilience, disaster recovery, high availability, and non-functional capabilities.
Lead architecture governance through design reviews, Architecture Review Boards, technical assurance, and architecture decision records.
Support engineering teams through implementation, testing, and production readiness; mentor engineers and promote best practices.

Inne informacje

Only candidates with an existing legal right to work in Europe will be considered.

ITDS

323 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz