IAM Security Architect (AI-Assisted)

Quick Facts

• Role: IAM Security Architect (AI-Assisted)

Description

Design and implement secure Identity and Access Management (IAM) architectures across enterprise, cloud, and hybrid environments. Combine IAM security architecture principles (Zero Trust, RBAC/ABAC, PAM, IGA) with AI-assisted tools to automate IAM processes. Support secure technology evaluation, integrations, and IAM risk assessments while ensuring data protection, compliance, and auditability.

Responsibilities

• Design and implement IAM security architectures and controls for enterprise, cloud, and hybrid environments

• Gather business, technical, and compliance requirements for IAM solutions, implementations, migrations, and security improvements

• Define and improve IAM capabilities (identity lifecycle management, provisioning/deprovisioning, SSO, federation, MFA, PAM, access governance)

• Design and improve authentication, authorization, and access control models (RBAC, ABAC, least privilege, Zero Trust)

• Perform IAM security architecture reviews, risk assessments, and access control design evaluations

• Develop IAM reference architectures, security standards, access control policies, and identity governance guidelines

• Evaluate IAM technologies (IdPs, IGA, PAM, federation platforms, and cloud-native identity services)

• Design and support IAM integrations with cloud platforms, SaaS applications, enterprise systems, directories, and APIs

• Collaborate with cloud, infrastructure, development, security operations, compliance, and enterprise architecture teams

• Support IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform, or similar tools

• Use AI-assisted workflows for identity/access risk analysis, access reviews, entitlement analysis, role/policy analysis, provisioning optimization, compliance reporting, and automation of repetitive tasks

• Ensure safe AI-assisted automation with validation, data protection, auditability, and human oversight

• Communicate IAM security risks, architectural decisions, and remediation plans

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience

• 5+ years of information security experience with focus on IAM/identity security architecture/IAM engineering

• Proven experience delivering or significantly contributing to IAM implementation, migration, integration, or modernization

• Hands-on expertise with at least one enterprise IAM, IGA, PAM, or identity federation platform

• Strong understanding of IAM principles: identity lifecycle management, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege, privileged access

• Knowledge of IAM protocols and standards: SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos

• Experience with IAM technologies such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt, CyberArk, or similar

• Understanding of cloud IAM concepts and identity security controls across at least one major cloud platform (Azure, AWS, or GCP)

• Security architecture principles/frameworks such as Zero Trust, NIST, ISO 27001, or similar

• Working knowledge of SecOps-related domains (cloud, network, application security, data protection, security operations)

• Intermediate AI-assisted tooling/automation experience for access analysis, security research, IAM troubleshooting, and creating/validating scripts, queries, access policies, and documentation; ability to configure AI-assisted workflows/integrations

• Safe AI usage: protect sensitive identity data, maintain access control/auditability, validate AI outputs, and keep human oversight

• Strong communication and collaboration skills

• Hands-on technical proficiency

Benefits

• Career development programs and mentoring

• Thought leadership and soft skills/well-being programs

• Certification support (Anthropic, Gemini, GCP, Azure, AWS)

• English classes

• Stable pay

• Employee Stock Purchase Plan with 15% discount

• Health insurance and multisport; shopping vouchers

• Referral bonuses up to $2,000

• Hybrid-by-design with opportunity to work remotely within Poland

• Chance to work abroad up to 60 days annually

• Business-driven relocation opportunities