IAM Engineer (Security Team)

Responsibilities

• Design, implement, and maintain Identity and Access Management (IAM) solutions across the organization
• Integrate and support IdP systems (e.g., Okta, Keycloak, SailPoint) with internal and external services
• Develop and enforce access control models (RBAC, ABAC, PBAC) aligned with business processes
• Automate user lifecycle management (provisioning, deprovisioning, onboarding, offboarding)
• Implement and maintain authentication and authorization flows (SAML, OAuth2, OIDC, LDAP, Kerberos, SCIM)
• Collaborate with engineering, DevOps, and security teams to embed IAM into infrastructure and applications
• Build and maintain automation scripts/tools (Python or Go) to reduce manual effort and improve efficiency
• Manage and optimize IAM in cloud environments (AWS, GCP)
• Contribute to CI/CD pipelines and ensure secure integration of IAM processes
• Monitor, troubleshoot, and resolve access-related issues and incidents
• Participate in security audits, access reviews, and compliance initiatives
• Document IAM processes, standards, and best practices

Requirements

• Solid understanding of access management processes in large organizations
• Hands-on experience with deployment and integration of IdP solutions: Okta / Keycloak / SailPoint
• Strong knowledge of RBAC, ABAC, PBAC, and experience embedding access models into IDM systems and company workflows
• Understanding of authentication and authorization protocols: SAML, OIDC, OAuth2, LDAP, Kerberos, SCIM
• Experience with provisioning/deprovisioning automation, onboarding/offboarding processes
• Experience with Git and CI/CD pipelines
• Understanding of cloud IAM services (e.g., AWS or GCP)
• Knowledge of Python or Go for automation tasks
• Nice to have: Experience integrating LLMs via APIs / MCP into existing systems
• Infrastructure as Code skills (Terraform, Ansible)
• Experience with MDM solutions
• Familiarity with ELK stack
• Experience in incident investigation and participation in CTF challenges

Benefits

• 25 vacation days and 5 family days yearly
• Flexible start to the workday
• Support from a professional corporate coach and psychologist
• Regular internal and external activities, workshops, trips, and corporate events
• Access to our internal knowledge base, meetups, and team-building activities
• Ongoing training in new technologies and continuous professional development support