IAM Engineer (Security Team)

About the role

This IAM Engineer role is central to Talentgrator's Security team, bridging development, infrastructure, and information security. The position involves designing, implementing, and maintaining IAM solutions across the organization, with a strong emphasis on integrating and supporting Identity Provider (IdP) systems like Okta, Keycloak, or SailPoint with various internal and external services. A key aspect of the role is developing and enforcing access control models such as RBAC, ABAC, and PBAC, ensuring they align with business processes.

A significant part of the work involves automating user lifecycle management, including provisioning, deprovisioning, onboarding, and offboarding processes. The engineer will implement and maintain authentication and authorization flows using protocols like SAML, OAuth2, OIDC, LDAP, Kerberos, and SCIM. Collaboration with engineering, DevOps, and security teams is crucial to embed IAM practices into infrastructure and applications, ensuring secure integration within CI/CD pipelines.

Success in this role means reducing manual effort and improving efficiency through automation, building and maintaining scripts in Python or Go, and optimizing IAM within cloud environments like AWS and GCP. The engineer will also monitor and troubleshoot access-related issues, participate in security audits, and contribute to compliance initiatives, all while documenting IAM processes and best practices.

Skills that matter here

• IAM: This role requires designing, implementing, and maintaining comprehensive Identity and Access Management solutions across the organization.
• RBAC: The engineer will develop and enforce Role-Based Access Control models, along with ABAC and PBAC, ensuring alignment with business processes.
• SAML: Implementing and maintaining authentication and authorization flows using protocols like SAML, OIDC, and OAuth2 is a core responsibility.
• Python: Building and maintaining automation scripts and tools using Python or Go is essential to reduce manual effort and improve efficiency.
• AWS: Managing and optimizing IAM within cloud environments, specifically AWS or GCP, is a key part of the role.
• Terraform: Infrastructure as Code skills, including Terraform and Ansible, are valuable for managing and provisioning IAM infrastructure.

Who this role suits

• A person who thrives on automating processes and reducing manual effort in identity and access management.
• Someone who enjoys collaborating across security, development, and operations teams to embed security best practices.
• An individual with a strong technical foundation in cloud environments and various authentication/authorization protocols.
• A professional who is meticulous about documentation and contributes to security audits and compliance initiatives.

From the employer

Responsibilities

• Design, implement, and maintain Identity and Access Management (IAM) solutions across the organization
• Integrate and support IdP systems (e.g., Okta, Keycloak, SailPoint) with internal and external services
• Develop and enforce access control models (RBAC, ABAC, PBAC) aligned with business processes
• Automate user lifecycle management (provisioning, deprovisioning, onboarding, offboarding)
• Implement and maintain authentication and authorization flows (SAML, OAuth2, OIDC, LDAP, Kerberos, SCIM)
• Collaborate with engineering, DevOps, and security teams to embed IAM into infrastructure and applications
• Build and maintain automation scripts/tools (Python or Go) to reduce manual effort and improve efficiency
• Manage and optimize IAM in cloud environments (AWS, GCP)
• Contribute to CI/CD pipelines and ensure secure integration of IAM processes
• Monitor, troubleshoot, and resolve access-related issues and incidents
• Participate in security audits, access reviews, and compliance initiatives
• Document IAM processes, standards, and best practices

Requirements

• Solid understanding of access management processes in large organizations
• Hands-on experience with deployment and integration of IdP solutions: Okta / Keycloak / SailPoint
• Strong knowledge of RBAC, ABAC, PBAC, and experience embedding access models into IDM systems and company workflows
• Understanding of authentication and authorization protocols: SAML, OIDC, OAuth2, LDAP, Kerberos, SCIM
• Experience with provisioning/deprovisioning automation, onboarding/offboarding processes
• Experience with Git and CI/CD pipelines
• Understanding of cloud IAM services (e.g., AWS or GCP)
• Knowledge of Python or Go for automation tasks
• Nice to have: Experience integrating LLMs via APIs / MCP into existing systems
• Infrastructure as Code skills (Terraform, Ansible)
• Experience with MDM solutions
• Familiarity with ELK stack
• Experience in incident investigation and participation in CTF challenges

Benefits

• 25 vacation days and 5 family days yearly
• Flexible start to the workday
• Support from a professional corporate coach and psychologist
• Regular internal and external activities, workshops, trips, and corporate events
• Access to our internal knowledge base, meetups, and team-building activities
• Ongoing training in new technologies and continuous professional development support