IAM Security Architect (AI-enabled)

Quick Facts

• Role: IAM Security Architect (AI-enabled)

• Focus: Secure identity architecture across enterprise, cloud, and hybrid environments with AI-assisted automation

Description

You will design and optimize secure Identity and Access Management (IAM) architectures across enterprise, cloud, and hybrid environments, combining IAM security principles with AI-assisted tools to automate and improve IAM processes. You’ll own access control modeling, security architecture reviews and risk assessments, reference architectures/standards, and IAM technology evaluations and integrations. You will also support safe AI-assisted IAM workflows for risk analysis, access reviews, entitlement analysis, provisioning optimization, and compliance evidence collection.

Responsibilities

• Design and implement IAM security architectures and controls across enterprise, cloud, and hybrid environments

• Gather business, technical, and compliance requirements for IAM implementations, migrations, and improvements

• Define and improve IAM capabilities: identity lifecycle management, provisioning/deprovisioning, SSO, federation, MFA, PAM, and access governance

• Design and improve authentication/authorization/access control models including RBAC, ABAC, least privilege, and Zero Trust

• Conduct IAM security architecture reviews, risk assessments, and access control design evaluations

• Develop IAM reference architectures, security standards, access control policies, and identity governance guidelines

• Evaluate IAM technologies (IdPs, IGA, PAM, federation, and cloud identity services)

• Design and support IAM integrations with cloud platforms, SaaS, enterprise systems, directories, and APIs

• Collaborate with cloud, infrastructure, development, security operations, compliance, and enterprise architecture teams

• Support IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform (or similar)

• Use AI-assisted tools for IAM workflows (risk analysis, access reviews, entitlement analysis, role/policy analysis, provisioning optimization, compliance reporting/evidence)

• Ensure AI-assisted automation is validated, auditable, protected, and includes human oversight

• Communicate IAM security risks, architectural decisions, and remediation plans

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience

• 5+ years of information security experience focused on IAM/identity security architecture/IAM engineering

• Proven experience contributing to IAM implementation, migration, integration, or modernization

• Hands-on expertise with at least one enterprise IAM, IGA, PAM, or identity federation platform

• Strong understanding of IAM principles (identity lifecycle management, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege, privileged access)

• Knowledge of IAM protocols/standards: SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos

• Experience with IAM technologies such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt, CyberArk (or similar)

• Cloud IAM understanding across at least one major platform (Azure, AWS, or GCP)

• Security architecture frameworks knowledge: Zero Trust, NIST, ISO 27001 (or similar)

• SecOps integration knowledge across cloud/network/application/data protection and security operations

• Intermediate AI-assisted tools and automation experience for access analysis/troubleshooting, structured prompting, AI-generated script/query/policy/document validation, and basic AI workflow/integration configuration

• Safe AI usage: protect sensitive identity data, maintain auditability and validation of AI outputs; willingness to further develop AI automation skills

• Strong communication and collaboration skills

• Hands-on technical proficiency (must have)

Benefits

• Hybrid by design mode; remote opportunity within Poland

• Chance to work abroad up to 60 days annually; business-driven relocation opportunities

• Career development programs; thought leadership, mentoring, soft skills and well-being programs

• Certification support (Anthropic, Gemini, GCP, Azure, AWS); English classes

• Stable pay; Employee Stock Purchase Plan with 15% discount

• Benefits package (health insurance, multisport, shopping vouchers)

• Referral bonuses up to $2,000

• Office amenities (entertainment/relaxation zones, sports tables, free snacks/coffee)

• Corporate, social, and well-being events

• Open to B2B/contractor arrangements with individually agreed terms