IAM Security Architect + AI (basic)

Brak informacji o wynagrodzeniu

SeniorHybryda·KatowiceFull-time

#474700·Dodano wczoraj·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Identity and Access ManagementSecurity ArchitecturePrivileged Access ManagementRBACOpenId ConnectSAML OAuth 2.0

Podsumowanie oferty

Design and optimize IAM security architectures for global clients across enterprise, cloud, and hybrid environments. Use AI-assisted tools to improve IAM workflows, combining identity security principles such as Zero Trust, RBAC/ABAC, and PAM.

Wymagania

Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience.
At least 5 years of information security experience focused on IAM, identity security architecture, or IAM engineering.
Experience delivering or significantly contributing to IAM implementation, migration, integration, or modernization projects.
Hands-on expertise with at least one enterprise IAM, IGA, PAM, or identity federation platform.
Strong understanding of identity lifecycle management, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege, and privileged access.
Knowledge of IAM protocols and standards such as SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, or Kerberos.
Experience with IAM technologies such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt, or CyberArk, or similar solutions.
Understanding of cloud IAM concepts and identity security controls on at least one major cloud platform: Azure, AWS, or GCP.
Understanding of security architecture principles and frameworks such as Zero Trust, NIST, or ISO 27001.
Working knowledge of cloud, network, and application security, data protection, and security operations.
Intermediate practical experience with AI-assisted tools and automation, including access analysis, security research, IAM troubleshooting, structured prompting, generating and validating scripts, queries, access policies and documentation, and basic configuration of AI-assisted workflows or integrations.
Understanding of safe AI usage, including sensitive identity data protection, access control, auditability, and validation of AI-generated outputs; willingness to further develop AI automation skills.
Strong communication and collaboration skills.
Hands-on technical proficiency.

Nice to have:

Experience with IAM platforms such as Microsoft Entra ID, Okta, Ping Identity, ForgeRock, Auth0, SailPoint, Saviynt, or CyberArk.
Experience with IGA, PAM, CIAM, or B2B/B2C identity scenarios.
Experience with cloud identity, workload identities, service principals, managed identities, and hybrid identity architectures.
Experience with IAM automation using PowerShell, Python, REST APIs, SCIM, or Terraform.
Experience integrating IAM solutions with SIEM/SOAR, security monitoring, and automated response workflows.
Experience with AI automation, AI agents, Microsoft Copilot Studio, Azure OpenAI, Amazon Bedrock, Claude, LangChain, or Power Automate.
Understanding of AI security risks, including sensitive data exposure, prompt injection, excessive permissions, and insecure AI tool usage.
Relevant security or IAM certifications.
AI-related certifications.

Obowiązki

Design and implement security architectures and controls for IAM systems across enterprise, cloud, and hybrid environments.
Gather business, technical, and compliance requirements for IAM implementations, migrations, and security improvements.
Define and improve identity lifecycle management, provisioning and deprovisioning, SSO, federation, MFA, PAM, and access governance capabilities.
Design and improve authentication, authorization, and access control models, including RBAC, ABAC, least privilege, and Zero Trust principles.
Conduct IAM security architecture reviews, risk assessments, and access control design evaluations.
Develop IAM reference architectures, security standards, access control policies, and identity governance guidelines.
Evaluate IAM technologies, including identity providers, IGA, PAM, federation platforms, and cloud-native identity services.
Design and support IAM integrations with cloud platforms, SaaS applications, enterprise systems, directories, and APIs.
Collaborate with cloud, infrastructure, development, security operations, compliance, and enterprise architecture teams to integrate IAM security into enterprise solutions.
Support IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform, or similar technologies.
Use AI-assisted tools and workflows for identity and access risk analysis, access reviews, entitlement and role analysis, provisioning workflow optimization, compliance reporting, evidence collection, scripting, documentation, and repetitive task automation.
Identify opportunities for AI-assisted IAM automation while ensuring validation, data protection, auditability, and human oversight.
Communicate IAM security risks, architectural decisions, and remediation plans to stakeholders and security leadership.

Benefity

Career development programs, mentoring, thought leadership, soft skills, and well-being programs.
Certifications, including Anthropic, Gemini, GCP, Azure, and AWS.
English classes.
Participation in the Employee Stock Purchase Plan with a 15% discount.
Benefits package including health insurance, multisport, and shopping vouchers.
Referral bonuses up to $2,000.
Business-driven relocation opportunities.
Corporate, social, and well-being events.
Offices with entertainment and relaxation zones, table tennis, football, free snacks, and coffee.

Pakiet relokacyjny

Kursy językowe

Udziały pracownicze

Ubezpieczenie

Karta sportowa

Premie

Spotkania integracyjne

Darmowe przekąski

Napoje w biurze

Inne informacje

Remote work is available within Poland; the offer also states an opportunity to work abroad for up to 60 days annually.

EPAM Systems

1668 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz