IAM Security Architect (AI-Assisted)

Quick Facts

• Role: IAM Security Architect (AI-Assisted)

Description

Design, implement, and optimize secure Identity and Access Management (IAM) architectures across enterprise, cloud, and hybrid environments. Build IAM reference architectures and access control models using Zero Trust principles, while using AI-assisted workflows to automate and analyze IAM activities safely. Perform IAM security architecture reviews, risk assessments, and technology evaluations, and collaborate with security, cloud, infrastructure, development, compliance, and enterprise architecture teams.

Responsibilities

• Design and implement IAM security architectures and controls across enterprise, cloud, and hybrid environments
• Gather business, technical, and compliance requirements for IAM solutions (new implementations, migrations, security improvements)
• Define and improve IAM capabilities (identity lifecycle management, provisioning/deprovisioning, SSO, federation, MFA, PAM, access governance)
• Model authentication/authorization/access using RBAC, ABAC, least privilege, and Zero Trust
• Conduct IAM security architecture reviews, risk assessments, and access control evaluations
• Develop IAM reference architectures, standards, access control policies, and identity governance guidelines
• Evaluate IAM technologies (IdPs, IGA, PAM, federation platforms, cloud-native identity services)
• Design and support integrations with cloud platforms, SaaS, enterprise systems, directories, and APIs
• Collaborate cross-functionally to integrate IAM security into enterprise solutions
• Support IAM automation with PowerShell, Python, REST APIs, SCIM, Terraform, or similar technologies
• Use AI-assisted tools/workflows for identity and access risk analysis, access reviews/entitlement analysis, role/policy analysis, provisioning optimization, compliance reporting, and repetitive task automation
• Ensure safe AI automation with validation, data protection, auditability, and human oversight
• Communicate IAM security risks, architectural decisions, and remediation plans to stakeholders and security leadership

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience
• 5+ years of information security experience, focused on IAM/identity security architecture or IAM engineering
• Proven experience delivering or contributing to IAM implementation, migration, integration, or modernization projects
• Strong hands-on expertise with at least one enterprise IAM/IGA/PAM/identity federation platform
• Strong understanding of IAM principles (identity lifecycle management, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege, privileged access)
• Knowledge of IAM protocols and standards: SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos
• Experience with IAM technologies such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt, CyberArk, or similar
• Understanding of cloud IAM concepts and identity security controls across Azure, AWS, or GCP
• Architecture frameworks knowledge: Zero Trust, NIST, ISO 27001, or similar
• Working knowledge of adjacent security domains (cloud/network/application security, data protection, SecOps) at a non-deep-specialist level
• Intermediate AI-assisted tooling and automation experience for IAM/security tasks (access analysis, troubleshooting, scripting/queries/policies/docs generation and validation using AI, simplifying repetitive workflows, basic AI workflow/integration setup)
• Safe AI usage understanding: protect sensitive identity data, ensure auditability/validation, and maintain human oversight; willingness to further develop AI automation skills
• Strong communication and collaboration skills
• Hands-on technical proficiency is required

Benefits

• Hybrid work design with opportunity to work remotely within Poland and chance to work abroad up to 60 days annually
• Career development programs, mentoring, thought leadership, and soft skills/well-being programs
• Certification support (Anthropic, Gemini, GCP, Azure, AWS) and English classes
• Stable pay; Employee Stock Purchase Plan participation with a 15% discount
• Health insurance and benefits package (including MultiSport and shopping vouchers)
• Referral bonuses up to $2,000
• Employee events and an office environment with entertainment/relaxation zones, free snacks, and more
• Contracting possible; B2B terms agreed individually