IAM Security Operations Engineer – Middle

About the role

In this role, you will be responsible for maintaining and troubleshooting IAM services, focusing on identity lifecycle processes such as Joiner/Mover/Leaver (JML) access management. You will ensure secure, role-based access across systems while automating repetitive tasks to enhance efficiency.

You will work with tools like Keycloak and Adaxes, configuring automation rules and workflows to align with security standards. Your success will be measured by your ability to monitor the IAM platform's health, identify risks proactively, and communicate effectively with users regarding access requests.

Skills that matter here

• IAM: This role focuses on managing IAM services and ensuring secure access across systems.
• Keycloak: You will perform technical troubleshooting and configuration of Keycloak for identity management.
• Adaxes: Experience with Adaxes is essential for automating identity lifecycle processes.
• SAML 2.0: You will maintain secure IAM integrations using SAML 2.0 among other protocols.
• Python: Scripting with Python is required for automating access management tasks.
• RBAC: You will implement role-based access control models in your daily tasks.

Who this role suits

• You have a strong background in IAM or security engineering roles.
• You are comfortable troubleshooting complex technical issues independently.
• You communicate effectively with both technical and non-technical users.
• You are proactive in identifying risks and ensuring security compliance.

From the employer

• Handle complex and non-standard JML scenarios
• Perform technical troubleshooting of IAM services (SSO, IdP, provisioning flows), including Keycloak
• Configure and maintain Adaxes automation tool: automation rules, approval-based workflows, role-based permissions, etc
• Implement changes in IAM services and integrations (Keycloak, Adaxes,etc)
• Process Joiner/Mover/Leaver (JML) access requests in alignment with approved RBAC models
• Automate repetitive access management tasks
• Validate access requests against least privilege and segregation of duties principles
• Write technical and user documentation, including models (e.g., UML)
• Monitor IAM platform health and proactively identify risks
• Assist users with access and system requests in alignment with Security standards and procedures

• 2+ years in IAM, identity operations, or security engineering roles
• Experience in maintaining and troubleshooting IAM-related services (Keycloak, Adaxes, GWS)
• Experience maintaining secure IAM integrations using APIs and federation protocols (SAML 2.0, OAuth 2.0, OpenID Connect)
• Hands-on experience with RBAC configuration and provisioning workflows
• Solid understanding of IAM architecture concepts
• Working knowledge of SSO, MFA, provisioning, and directory services
• Understanding of identity-related security risks
• Strong troubleshooting and log analysis skills
• Understanding of identity protocols (SAML, OAuth, OIDC – operational level)
• Ability to communicate clearly with business users
• Ability to work independently on technical incidents
• Scripting or automation capability (e.g., Python, PowerShell, Bash)
• Intermediate or higher English (B1+) and strong command of Russian

• Private health insurance
• Sports benefits
• Comprehensive Mental Health Program
• Free English lessons (online)
• Local language courses
• Paid time off
• Maternity leave support
• Referral program rewards
• Upskilling, internal workshops, and participation in professional conferences and corporate events