New

IAM Security Architect + AI (basic)

Brak informacji o wynagrodzeniu

MidHybrydaFull-time

#474111·Dodano 7 dni temu·2

Źródło: EPAM Systems

Aplikuj teraz

Tech Stack / Keywords

IAMZero TrustRBAC/ABACPAMIGASAML OAuth 2.0OpenID ConnectSCIMPython

Podsumowanie oferty

Design and optimize Identity and Access Management (IAM) architectures for global clients across cloud and hybrid environments. Use AI-assisted tools to automate IAM processes, applying identity security principles such as Zero Trust, RBAC/ABAC, PAM and IGA.

Wymagania

Bachelor's degree in Computer Science, Cybersecurity, Engineering or equivalent practical experience.
5+ years of information security experience, focused on IAM, identity security architecture or IAM engineering.
Proven experience delivering or significantly contributing to IAM implementation, migration, integration or modernization projects.
Strong hands-on expertise with at least one enterprise IAM, IGA, PAM or identity federation platform.
Strong understanding of IAM principles, including identity lifecycle management, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege and privileged access.
Knowledge of common IAM protocols and standards such as SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP or Kerberos.
Experience with IAM technologies such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt, CyberArk or similar solutions.
Understanding of cloud IAM concepts and identity security controls across at least one major cloud platform (Azure, AWS or GCP).
Understanding of security architecture principles and frameworks such as Zero Trust, NIST, ISO 27001 or similar.
Working knowledge of related security domains, including cloud security, network security, application security, data protection and security operations, without requiring deep specialization in each.
Intermediate practical experience with AI-assisted tools and automation, including using AI tools for access analysis, security research and IAM troubleshooting; applying structured prompting for technical and security tasks; generating and validating scripts, queries, access policies and documentation with AI; using AI to simplify repetitive IAM and security workflows; and basic experience configuring AI-assisted workflows or integrations.
Understanding of safe AI usage, including sensitive identity data protection, access control, auditability and validation of AI-generated outputs; willingness to further develop AI automation skills.
Strong communication and collaboration skills.
Hands-on technical proficiency is a must.

Nice to have:

Experience with IAM platforms such as Microsoft Entra ID, Okta, Ping Identity, ForgeRock, Auth0, SailPoint, Saviynt, CyberArk or similar.
Experience with Identity Governance and Administration (IGA), Privileged Access Management (PAM), CIAM or B2B/B2C identity scenarios.
Experience with cloud identity, workload identities, service principals, managed identities and hybrid identity architectures.
Experience with IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform or similar technologies.
Experience integrating IAM solutions with SIEM/SOAR, security monitoring and automated response workflows.
Experience with AI automation, AI agents, Microsoft Copilot Studio, Azure OpenAI, Amazon Bedrock, Claude, LangChain, Power Automate or similar tools.
Understanding of AI security risks, including sensitive data exposure, prompt injection, excessive permissions and insecure AI tool usage.
Relevant security or IAM certifications.
AI-related certifications.

Obowiązki

Security architecture design:

Design and implement security architectures and controls for Identity and Access Management (IAM) systems across enterprise, cloud and hybrid environments.

Requirements gathering:

Gather business, technical and compliance requirements to design IAM solutions for new implementations, migrations and security improvements.

IAM capability development:

Define and improve IAM capabilities, including identity lifecycle management, provisioning and deprovisioning, SSO, federation, MFA, privileged access management (PAM) and access governance.

Access control modeling:

Design and improve authentication, authorization and access control models, including RBAC, ABAC, least privilege and Zero Trust principles.

Reviews and risk assessment:

Conduct IAM security architecture reviews, risk assessments and access control design evaluations.

Standards and governance:

Develop IAM reference architectures, security standards, access control policies and identity governance guidelines.

Technology evaluation:

Evaluate IAM technologies and solutions, including identity providers (IdPs), IGA, PAM, federation platforms and cloud-native identity services.

System integration:

Design and support IAM integrations with cloud platforms, SaaS applications, enterprise systems, directories and APIs.

Cross-functional collaboration:

Collaborate with cloud, infrastructure, development, security operations, compliance and enterprise architecture teams to integrate IAM security into enterprise solutions.

Automation support:

Support IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform or similar technologies.

AI-assisted IAM workflows:

Use AI-assisted tools and workflows for identity and access risk analysis, access reviews and entitlement analysis, role and access policy analysis, provisioning workflow optimization, compliance reporting and evidence collection, and security scripting, documentation and repetitive task automation.

Safe AI automation:

Identify opportunities for AI-assisted IAM automation while ensuring appropriate validation, data protection, auditability and human oversight.

Stakeholder communication:

Communicate IAM security risks, architectural decisions and remediation plans to stakeholders and security leadership.

Benefity

Career development programs.
Thought leadership, mentoring, soft skills and well-being programs.
Certifications, including Anthropic, Gemini, GCP, Azure and AWS.
English classes.
Participation in the Employee Stock Purchase Plan with a 15% discount.
Benefits package including health insurance, Multisport and shopping vouchers.
Referral bonuses up to $2,000.
Offices with entertainment and relaxation zones, table tennis and football, free snacks and coffee.
Corporate, social and well-being events.

Pakiet relokacyjny

Kursy językowe

Ubezpieczenie

Karta sportowa

Udziały pracownicze

Premie

Spotkania integracyjne

Darmowe przekąski

Napoje w biurze

Inne informacje

Remote work is available within Poland.
Opportunity to work abroad for up to 60 days annually.

EPAM Systems

1769 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz