Design Engineer (IAM)

1500 - 1800 PLN/ dzień./ dzień.B2BB2B (netto)

MidHybryda·KrakówFull-time·B2B

#473666·Dodano wczoraj·0

Źródło: nofluffjobs.com

Aplikuj teraz

Tech Stack / Keywords

Enterprise ArchitectSecurityIAMProtocolsSAMLCloudGCP KubernetesService meshAPIPKICI/CDHigh availability

Podsumowanie oferty

You’ll serve as a technical authority in the IAM Transformation Programme, shaping HLD/LLD designs and target architectures for secure, cloud-native identity solutions. You’ll guide delivery teams in building scalable identity controls using GCP, Kubernetes, and federation protocols including OIDC, OAuth2, SAML, and SCIM.

Wymagania

Expertise in Enterprise Architecture and Security Architecture.
Deep knowledge of Identity and Access Management (IAM) design and operations.
Proven experience with authentication and authorisation models.
Hands-on knowledge of Zero Trust architectures.
Understanding of Human, Agent, and Workload Identity solutions.
Experience with identity federation protocols: OIDC, OAuth2, SAML, and SCIM.
Experience building cloud architectures on GCP or similar platforms.
Proficiency with Kubernetes, service mesh, and containerised designs.
Strong background in API architecture and security implementation.
Experience with event-driven architecture models.
Knowledge of Policy-as-Code frameworks (OPA/Cedar).
Expertise in PKI, certificates, and secret management.
Exposure to DevSecOps and CI/CD environments.
Proven capability in designing for high availability, resilience, and scalability.
Experience overseeing architecture governance and design review processes.
Strong stakeholder engagement, communication, and technical leadership skills.

Obowiązki

Produce high-level (HLD) and low-level (LLD) architecture documents for IAM capabilities.
Define end-to-end technical solutions spanning application, data, and infrastructure domains.
Translate complex business, security, and regulatory requirements into practical, supportable designs.
Develop reference architectures, patterns, and reusable standards for IAM services.
Design secure integration between identity platforms, applications, and infrastructure layers.
Create cloud-native solutions leveraging GCP and Kubernetes, including service mesh design.
Develop authentication, authorisation, and federation models (OIDC, OAuth2, SAML, SCIM).
Implement Agent Identity, Human Identity, and Workload Identity capabilities.
Define Zero Trust architectures and establish trust-boundary controls.
Design API security and service-to-service authentication patterns.
Develop event-driven integration architectures using messaging and asynchronous processing.
Define and implement Policy Decision Point (PDP) and Policy Enforcement Point (PEP) frameworks using Policy-as-Code (OPA/Cedar).
Create PKI, certificate management, and secret-handling integration patterns.
Design for resilience, high availability, and disaster recovery scenarios.
Produce Architecture Decision Records (ADRs) and govern design consistency through Architecture Review Boards and Design Authorities.
Perform solution assurance and design reviews across vendor and in-house deliveries.
Identify technical risks, assumptions, and dependencies early in the lifecycle.
Align architecture with enterprise strategy in collaboration with senior architects.
Support engineering delivery, testing, and readiness for production stages.
Mentor engineers and promote best practices across design teams.
Evaluate emerging technologies and vendor products for alignment with IAM objectives.
Contribute to programme roadmap and future-state architecture planning.

Benefity

Access to training platforms and growth opportunities.
Health care through Interpolska Health Care.
Multisport card.
Warta Insurance.
Laptop and essential software provided.

Opieka zdrowotna

Karta sportowa

Ubezpieczenie

Mindbox

282 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz