IAM Security Architect + AI (basic)

Brak informacji o wynagrodzeniu

SeniorHybryda·PoznańFull-time

#474701·Dodano dziś·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Security ArchitectureIdentity and Access ManagementPrivileged Access ManagementZero TrustSAML OAuth 2.0

Podsumowanie oferty

Design and implement secure IAM architectures for global clients across enterprise, cloud and hybrid environments. Combine Zero Trust, access-control principles and AI-assisted tools to improve and automate identity and access workflows.

Wymagania

Bachelor's degree in Computer Science, Cybersecurity, Engineering or equivalent practical experience.
At least 5 years of information security experience focused on IAM, identity security architecture or IAM engineering.
Experience delivering or significantly contributing to IAM implementation, migration, integration or modernization projects.
Hands-on expertise with at least one enterprise IAM, IGA, PAM or identity federation platform.
Strong understanding of identity lifecycle management, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege and privileged access.
Knowledge of SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP or Kerberos.
Experience with Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt, CyberArk or similar solutions.
Understanding of cloud IAM and identity security controls on at least one major cloud platform: Azure, AWS or GCP.
Understanding of security architecture principles and frameworks such as Zero Trust, NIST or ISO 27001.
Working knowledge of cloud, network and application security, data protection and security operations.
Practical experience with AI-assisted tools and automation, including access analysis, security research, IAM troubleshooting, structured prompting, generating and validating scripts, queries, access policies and documentation, and simplifying repetitive workflows.
Understanding of safe AI usage, including sensitive identity data protection, access control, auditability and validation of generated outputs; willingness to further develop AI automation skills.
Strong communication and collaboration skills.
Hands-on technical proficiency is required.

Nice to have:

Experience with Microsoft Entra ID, Okta, Ping Identity, ForgeRock, Auth0, SailPoint, Saviynt, CyberArk or similar platforms.
Experience with IGA, PAM, CIAM or B2B/B2C identity scenarios.
Experience with cloud identity, workload identities, service principals, managed identities and hybrid identity architectures.
Experience with IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform or similar technologies.
Experience integrating IAM solutions with SIEM/SOAR, security monitoring and automated response workflows.
Experience with AI automation, AI agents, Microsoft Copilot Studio, Azure OpenAI, Amazon Bedrock, Claude, LangChain, Power Automate or similar tools.
Understanding of AI security risks, including sensitive data exposure, prompt injection, excessive permissions and insecure AI tool usage.
Relevant security or IAM certifications.
AI-related certifications.

Obowiązki

Security architecture and requirements:

Design and implement security architectures and controls for IAM systems across enterprise, cloud and hybrid environments.
Gather business, technical and compliance requirements for IAM implementations, migrations and security improvements.

IAM capabilities and access control:

Define and improve identity lifecycle management, provisioning and deprovisioning, SSO, federation, MFA, PAM and access governance.
Design and improve authentication, authorization and access-control models, including RBAC, ABAC, least privilege and Zero Trust.

Reviews, governance and technology:

Conduct IAM security architecture reviews, risk assessments and access-control design evaluations.
Develop IAM reference architectures, security standards, access-control policies and identity-governance guidelines.
Evaluate identity providers, IGA, PAM, federation platforms and cloud-native identity services.
Design and support IAM integrations with cloud platforms, SaaS applications, enterprise systems, directories and APIs.

Collaboration and automation:

Collaborate with cloud, infrastructure, development, security operations, compliance and enterprise architecture teams to integrate IAM security into enterprise solutions.
Support IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform or similar technologies.
Use AI-assisted tools and workflows for identity and access risk analysis, access reviews, entitlement and policy analysis, provisioning workflow optimization, compliance reporting, evidence collection, scripting, documentation and repetitive task automation.
Identify opportunities for AI-assisted IAM automation while ensuring validation, data protection, auditability and human oversight.
Communicate IAM security risks, architectural decisions and remediation plans to stakeholders and security leadership.

Benefity

Career development programs.
Mentoring, soft-skills and well-being programs.
Certifications, including Anthropic, Gemini, GCP, Azure and AWS.
English classes.
Employee Stock Purchase Plan with a 15% discount.
Health insurance, multisport and shopping vouchers.
Referral bonuses up to $2,000.
Free snacks and coffee at the offices.
Corporate, social and well-being events.
Business-driven relocation opportunities.

Spotkania integracyjne

Kursy językowe

Ubezpieczenie

Karta sportowa

Premie

Udziały pracownicze

Darmowe przekąski

Napoje w biurze

Inne informacje

Remote work is available within Poland; the role also offers the opportunity to work abroad for up to 60 days annually.

EPAM Systems

1668 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz