IAM Security Architect (AI-assisted)

Quick Facts

IAM Security Architect (AI-assisted) position focused on designing secure identity architectures across enterprise, cloud, and hybrid environments, with automation supported by AI-assisted workflows.

Description

You will design, implement, and optimize secure Identity and Access Management (IAM) architectures for global clients. The role combines core IAM security engineering (Zero Trust, RBAC/ABAC, PAM, IGA) with AI-assisted tools to automate and improve IAM operations such as access analysis, provisioning optimization, and compliance evidence collection—while maintaining validation, data protection, auditability, and human oversight.

Responsibilities

• Design and implement IAM security architectures and controls across enterprise, cloud, and hybrid environments
• Gather business, technical, and compliance requirements for IAM solutions (new implementations, migrations, security improvements)
• Define and improve IAM capabilities including identity lifecycle management, provisioning/deprovisioning, SSO, federation, MFA, privileged access management (PAM), and access governance
• Design and improve authentication, authorization, and access control models using RBAC, ABAC, least privilege, and Zero Trust principles
• Conduct IAM security architecture reviews, risk assessments, and access control design evaluations
• Develop IAM reference architectures, security standards, access control policies, and identity governance guidelines
• Evaluate IAM technologies (IdPs, IGA, PAM, federation platforms, cloud-native identity services)
• Design and support IAM integrations with cloud platforms, SaaS applications, enterprise systems, directories, and APIs
• Collaborate with cloud, infrastructure, development, security operations, compliance, and enterprise architecture teams
• Support IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform, or similar technologies
• Use AI-assisted workflows for identity/access risk analysis, access reviews and entitlement analysis, role/access policy analysis, provisioning workflow optimization, and compliance reporting/evidence collection
• Identify safe opportunities for AI-assisted IAM automation with proper validation, auditability, and human oversight
• Communicate IAM security risks, architectural decisions, and remediation plans to stakeholders and security leadership

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience
• 5+ years of information security experience focused on IAM, identity security architecture, or IAM engineering
• Proven experience delivering or significantly contributing to IAM implementation, migration, integration, or modernization projects
• Strong hands-on expertise with at least one enterprise IAM, IGA, PAM, or identity federation platform
• Strong understanding of IAM principles: identity lifecycle management, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege, and privileged access
• Knowledge of IAM protocols and standards: SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos
• Experience with IAM technologies such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt, CyberArk, or similar solutions
• Cloud IAM knowledge across at least one major cloud platform (Azure, AWS, or GCP)
• Security architecture framework knowledge (e.g., Zero Trust, NIST, ISO 27001)
• Working knowledge of related security domains (cloud security, network security, application security, data protection, security operations)
• Intermediate practical experience with AI-assisted tools and automation for access analysis, security research/troubleshooting, and generating/validating scripts, queries, access policies, and documentation; basic experience configuring AI-assisted workflows/integrations
• Safe AI usage: protect sensitive identity data, maintain auditability, validate AI outputs, and ensure human oversight; willing to further develop AI automation skills
• Strong communication and collaboration skills
• Hands-on technical proficiency (required)

Benefits

• Hybrid by design mode with the opportunity to work remotely within Poland
• Opportunity to work abroad for up to 60 days annually; business-driven relocation opportunities
• Career development programs, mentoring, and soft skills/well-being programs
• Certification support (Anthropic, Gemini, GCP, Azure, AWS) and English classes
• Stable pay; Employee Stock Purchase Plan with a 15% discount
• Benefits package (health insurance, multisport, shopping vouchers)
• Referral bonuses up to $2,000
• Office amenities and corporate, social, and well-being events
• Benefits are for employees; contractors are possible under individually agreed B2B terms