EPAM Systems

IAM Security Architect + AI (basic)

Brak informacji o wynagrodzeniu

SeniorHybryda·WarszawaFull-time

#474702·Dodano 10 dni temu·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Security ArchitectureIdentity SecurityIAMZero TrustRBACSAML OAuth 2.0SCIM

Podsumowanie oferty

Join EPAM’s Security team to design, implement, and optimize Identity and Access Management (IAM) architectures for global clients across enterprise, cloud, and hybrid environments. The role combines identity security principles such as Zero Trust, RBAC/ABAC, PAM, and IGA with AI-assisted tools to automate IAM workflows.

Wymagania

Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience.
5+ years of information security experience focused on IAM, identity security architecture, or IAM engineering.
Experience delivering or significantly contributing to IAM implementation, migration, integration, or modernization projects.
Hands-on expertise with at least one enterprise IAM, IGA, PAM, or identity federation platform.
Strong understanding of identity lifecycle management, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege, and privileged access.
Knowledge of SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, or Kerberos.
Experience with Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt, CyberArk, or similar solutions.
Understanding of cloud IAM concepts and identity security controls for at least one major cloud platform (Azure, AWS, or GCP).
Understanding of security architecture principles and frameworks such as Zero Trust, NIST, or ISO 27001.
Working knowledge of cloud security, network security, application security, data protection, and security operations.
Intermediate practical experience with AI-assisted tools and automation, including using AI for access analysis, security research, and IAM troubleshooting; structured prompting; generating and validating scripts, queries, access policies, and documentation; simplifying repetitive workflows; and basic experience configuring AI-assisted workflows or integrations.
Understanding of safe AI usage, including sensitive identity data protection, access control, auditability, and validation of AI-generated outputs; willingness to further develop AI automation skills.
Strong communication and collaboration skills.
Hands-on technical proficiency is required.

Nice to have:

Experience with Microsoft Entra ID, Okta, Ping Identity, ForgeRock, Auth0, SailPoint, Saviynt, CyberArk, or similar IAM platforms.
Experience with IGA, PAM, CIAM, or B2B/B2C identity scenarios.
Experience with cloud identity, workload identities, service principals, managed identities, and hybrid identity architectures.
Experience with IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform, or similar technologies.
Experience integrating IAM solutions with SIEM/SOAR, security monitoring, and automated response workflows.
Experience with AI automation, AI agents, Microsoft Copilot Studio, Azure OpenAI, Amazon Bedrock, Claude, LangChain, Power Automate, or similar tools.
Understanding of AI security risks, including sensitive data exposure, prompt injection, excessive permissions, and insecure AI tool usage.
Relevant security or IAM certifications.
AI-related certifications.

Obowiązki

Security Architecture Design:

Design and implement security architectures and controls for IAM systems across enterprise, cloud, and hybrid environments.

Requirements Gathering:

Gather business, technical, and compliance requirements for IAM solutions, including new implementations, migrations, and security improvements.

IAM Capability Development:

Define and improve identity lifecycle management, provisioning and deprovisioning, SSO, federation, MFA, privileged access management (PAM), and access governance.

Access Control Modeling:

Design and improve authentication, authorization, and access control models, including RBAC, ABAC, least privilege, and Zero Trust principles.

Reviews & Risk Assessment:

Conduct IAM security architecture reviews, risk assessments, and access control design evaluations.

Standards & Governance:

Develop IAM reference architectures, security standards, access control policies, and identity governance guidelines.

Technology Evaluation:

Evaluate identity providers (IdPs), IGA, PAM, federation platforms, and cloud-native identity services.

System Integration:

Design and support IAM integrations with cloud platforms, SaaS applications, enterprise systems, directories, and APIs.

Cross-Functional Collaboration:

Collaborate with cloud, infrastructure, development, security operations, compliance, and enterprise architecture teams to integrate IAM security into enterprise solutions.

Automation Support:

Support IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform, or similar technologies.

AI-Assisted IAM Workflows:

Use AI-assisted tools for identity and access risk analysis, access reviews and entitlement analysis, role and access policy analysis, provisioning workflow optimization, compliance reporting and evidence collection, and security scripting, documentation, and repetitive task automation.

Safe AI Automation:

Identify opportunities for AI-assisted IAM automation while ensuring validation, data protection, auditability, and human oversight.

Stakeholder Communication:

Communicate IAM security risks, architectural decisions, and remediation plans to stakeholders and security leadership.

Benefity

Career development programs.
Thought leadership, mentoring, soft skills, and well-being programs.
Certifications in Anthropic, Gemini, GCP, Azure, and AWS.
English classes.
Employee Stock Purchase Plan participation with a 15% discount.
Benefits package including health insurance, Multisport, and shopping vouchers.
Referral bonuses up to $2,000.
Offices with entertainment and relaxation zones, table tennis, football, free snacks, and coffee.
Corporate, social, and well-being events.
Business-driven relocation opportunities.

Kursy językowe

Ubezpieczenie

Karta sportowa

Udziały pracownicze

Premie

Darmowe przekąski

Napoje w biurze

Spotkania integracyjne

Inne informacje

Remote work is available within Poland.
Employees may work abroad for up to 60 days annually.

EPAM Systems

1770 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz