EPAM Systems

New

IAM Security Architect + AI (basic)

Brak informacji o wynagrodzeniu

SeniorHybryda·KrakówFull-time

#474708·Dodano 7 dni temu·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Identity and Access ManagementSecurity ArchitectureIdentity Governance and AdministrationPrivileged Access ManagementZero TrustSAML OAuth 2.0

Podsumowanie oferty

Design Identity and Access Management (IAM) security architectures for global clients across enterprise, cloud and hybrid environments. Improve identity security and IAM automation using Zero Trust, RBAC/ABAC, PAM, IGA and AI-assisted tools.

Wymagania

Bachelor's degree in Computer Science, Cybersecurity, Engineering or equivalent practical experience.
5+ years of information security experience focused on IAM, identity security architecture or IAM engineering.
Proven experience delivering or significantly contributing to IAM implementation, migration, integration or modernization projects.
Strong hands-on expertise with at least one enterprise IAM, IGA, PAM or identity federation platform.
Strong understanding of IAM principles, including identity lifecycle management, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege and privileged access.
Knowledge of SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP or Kerberos.
Experience with IAM technologies such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt, CyberArk or similar solutions.
Understanding of cloud IAM concepts and identity security controls on at least one major cloud platform: Azure, AWS or GCP.
Understanding of security architecture principles and frameworks such as Zero Trust, NIST or ISO 27001.
Working knowledge of cloud, network and application security, data protection and security operations.
Intermediate practical experience with AI-assisted tools and automation for access analysis, security research and IAM troubleshooting; structured prompting; generating and validating scripts, queries, access policies and documentation with AI; simplifying repetitive workflows; and basic configuration of AI-assisted workflows or integrations.
Understanding of safe AI usage, including sensitive identity data protection, access control, auditability and validation of AI-generated outputs; willingness to further develop AI automation skills.
Strong communication and collaboration skills.
Hands-on technical proficiency is required.

Nice to have:

Experience with IAM platforms such as Microsoft Entra ID, Okta, Ping Identity, ForgeRock, Auth0, SailPoint, Saviynt, CyberArk or similar.
Experience with IGA, PAM, CIAM, or B2B/B2C identity scenarios.
Experience with cloud identity, workload identities, service principals, managed identities and hybrid identity architectures.
Experience with IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform or similar technologies.
Experience integrating IAM solutions with SIEM/SOAR, security monitoring and automated response workflows.
Experience with AI automation, AI agents, Microsoft Copilot Studio, Azure OpenAI, Amazon Bedrock, Claude, LangChain, Power Automate or similar tools.
Understanding of AI security risks, including sensitive data exposure, prompt injection, excessive permissions and insecure AI tool usage.
Relevant security or IAM certifications.
AI-related certifications.

Obowiązki

Security architecture design:

Design and implement security architectures and controls for IAM systems across enterprise, cloud and hybrid environments.

Requirements gathering:

Gather business, technical and compliance requirements for IAM solutions covering new implementations, migrations and security improvements.

IAM capability development:

Define and improve identity lifecycle management, provisioning and deprovisioning, SSO, federation, MFA, PAM and access governance.

Access control modeling:

Design and improve authentication, authorization and access control models, including RBAC, ABAC, least privilege and Zero Trust principles.

Reviews and risk assessment:

Conduct IAM security architecture reviews, risk assessments and access control design evaluations.

Standards and governance:

Develop IAM reference architectures, security standards, access control policies and identity governance guidelines.

Technology evaluation:

Evaluate IAM technologies and solutions, including identity providers, IGA, PAM, federation platforms and cloud-native identity services.

System integration:

Design and support IAM integrations with cloud platforms, SaaS applications, enterprise systems, directories and APIs.

Cross-functional collaboration:

Collaborate with cloud, infrastructure, development, security operations, compliance and enterprise architecture teams to integrate IAM security into enterprise solutions.

Automation support:

Support IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform or similar technologies.

AI-assisted IAM workflows:

Use AI-assisted tools and workflows for identity and access risk analysis, access reviews and entitlement analysis, role and access policy analysis, provisioning workflow optimization, compliance reporting and evidence collection, and security scripting, documentation and repetitive task automation.
Identify opportunities for AI-assisted IAM automation while ensuring validation, data protection, auditability and human oversight.

Stakeholder communication:

Communicate IAM security risks, architectural decisions and remediation plans to stakeholders and security leadership.

Benefity

Career development programs.
Thought leadership, mentoring, soft skills and well-being programs.
Certifications, including Anthropic, Gemini, GCP, Azure and AWS.
English classes.
Participation in the Employee Stock Purchase Plan with a 15% discount.
Benefits package including health insurance, MultiSport and shopping vouchers.
Referral bonuses up to $2,000.
Offices with entertainment and relaxation zones, table tennis, football, free snacks and coffee.
Corporate, social and well-being events.
Business-driven relocation opportunities.

Pakiet relokacyjny

Kursy językowe

Ubezpieczenie

Karta sportowa

Udziały pracownicze

Premie

Napoje w biurze

Darmowe przekąski

Spotkania integracyjne

Inne informacje

Remote work is available within Poland.
Opportunity to work abroad for up to 60 days annually.

EPAM Systems

1769 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz