IAM Security Architect (AI-assisted)

Quick Facts

• Role: IAM Security Architect (AI-assisted)

Description

Design and implement secure IAM architectures across enterprise, cloud, and hybrid environments. Apply IAM principles such as Zero Trust, RBAC/ABAC, PAM, and IGA, and use AI-assisted workflows to automate and improve identity and access risk analysis, access reviews, entitlement analysis, provisioning optimization, and compliance evidence collection. Collaborate across security, cloud, infrastructure, development, compliance, and enterprise architecture teams to integrate IAM controls into enterprise solutions.

Responsibilities

• Design and implement IAM security architectures and controls for enterprise, cloud, and hybrid environments
• Gather business, technical, and compliance requirements for new IAM implementations, migrations, and security improvements
• Define and improve IAM capabilities (identity lifecycle management, provisioning/deprovisioning, SSO, federation, MFA, PAM, access governance)
• Model authentication, authorization, and access control using RBAC/ABAC, least privilege, and Zero Trust
• Perform IAM security architecture reviews, risk assessments, and access control evaluations
• Develop IAM reference architectures, security standards, access control policies, and identity governance guidelines
• Evaluate IAM technologies (IdPs, IGA, PAM, federation platforms, cloud-native identity services)
• Design and support IAM integrations with cloud platforms, SaaS applications, enterprise systems, directories, and APIs
• Collaborate with cross-functional teams to integrate IAM security into enterprise solutions
• Support IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform, or similar
• Use AI-assisted tools for risk analysis, access reviews/entitlement analysis, role/access policy analysis, provisioning workflow optimization, and compliance reporting/evidence collection
• Ensure safe AI automation with validation, data protection, auditability, and human oversight
• Communicate IAM security risks, architecture decisions, and remediation plans to stakeholders and security leadership

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience
• 5+ years of information security experience focused on IAM/identity security architecture/IAM engineering
• Proven experience delivering or significantly contributing to IAM implementation, migration, integration, or modernization projects
• Hands-on expertise with at least one enterprise IAM, IGA, PAM, or identity federation platform
• Strong IAM knowledge: identity lifecycle management, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege, and privileged access
• Knowledge of IAM protocols/standards: SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos
• Experience with IAM technologies: Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt, CyberArk, or similar
• Understanding of cloud IAM concepts and controls across Azure, AWS, or GCP
• Understanding of security architecture frameworks such as Zero Trust, NIST, ISO 27001
• Working knowledge of adjacent security areas (cloud security, network security, application security, data protection, security operations)
• Intermediate AI-assisted automation skills for access analysis, security research, IAM troubleshooting, and AI-assisted script/query/policy/document generation and validation; ability to configure AI-assisted workflows/integrations (basic)
• Safe AI usage knowledge: protect sensitive identity data, ensure auditability and validation of AI outputs; willing to develop AI automation further
• Strong communication and collaboration skills
• Hands-on technical proficiency required

Nice to have

• Experience with IAM platforms (Microsoft Entra ID, Okta, Ping Identity, ForgeRock, Auth0, SailPoint, Saviynt, CyberArk, etc.)
• Experience with IGA, PAM, CIAM, or B2B/B2C identity scenarios
• Experience with cloud identity/workload identities/service principals/managed identities/hybrid identity architectures
• Experience with IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform, etc.
• Experience integrating IAM with SIEM/SOAR and security monitoring/automated response workflows
• Experience with AI automation and tools such as Microsoft Copilot Studio, Azure OpenAI, Amazon Bedrock, Claude, LangChain, Power Automate
• Understanding of AI security risks (sensitive data exposure, prompt injection, excessive permissions, insecure AI tool usage)
• Relevant security/IAM or AI certifications

Benefits

• Career development programs and mentoring; soft skills and well-being programs
• Certification support (Anthropic, Gemini, GCP, Azure, AWS); English classes
• Stable pay; Employee Stock Purchase Plan participation (15% discount)
• Benefits package (health insurance, multisport, shopping vouchers)
• Referral bonuses up to $2,000
• Hybrid-by-design with opportunity to work remotely within Poland; chance to work abroad up to 60 days annually
• Business-driven relocation opportunities
• Corporate, social, and well-being events; offices with entertainment/relaxation zones and free snacks/coffee