AI-Augmented IAM Security Engineer

We are seeking an AI-Augmented IAM Security Engineer to handle the hands-on implementation, configuration, automation and day-to-day operation of enterprise Identity and Access Management. This is a delivery-and-operations role that works within the designs, standards, role models and policies set by IAM architects and security leadership. The focus is building, configuring, scripting, running and troubleshooting IAM, not defining target-state architecture, role models or governance policy.

Responsibilities

• Implement, configure and operate IAM solutions and controls based on architecture, standards and designs defined by IAM architects and security leadership.
• Maintain identity lifecycle (Joiner / Mover / Leaver) processes, including automated provisioning and deprovisioning across target systems.
• Configure core IAM capabilities, including SSO, federation, MFA and passwordless authentication, conditional access, RBAC/ABAC role models and least-privilege access.
• Develop and deploy IAM integrations and connectors with cloud platforms, SaaS applications, enterprise systems, directories, authoritative source systems, databases and APIs.
• Execute access certification and review campaigns, perform entitlement clean-up and configure segregation-of-duties (SoD) rules according to defined access policies.
• Operate Privileged Access Management controls, including credential vaulting, secrets rotation, session management and just-in-time and just-enough access.
• Develop automation scripts, workflows and IAM tooling using PowerShell, Python, REST APIs, SCIM, Terraform or similar technologies.
• Monitor IAM platform health, troubleshoot and resolve incidents and access issues, and perform patching, upgrades and configuration hardening.
• Maintain IAM logging, alerting and monitoring, and run backup and recovery procedures according to defined runbooks and resilience requirements.
• Deploy AI-assisted automations and agentic workflows for access-request triage, entitlement analysis, anomaly detection, root-cause analysis, privileged-access review support, compliance evidence collection and documentation generation.
• Integrate AI agents and LLM-backed automations into IAM systems and operational pipelines via function calling, SCIM, REST and webhooks.
• Develop reusable prompts, structured-prompting patterns and templates, and implement retrieval over IAM policies, role catalogs, runbooks and documentation, such as RAG.
• Implement output verification, human-in-the-loop approval gates and rollback paths so no AI-driven change reaches production access without review.
• Implement security and privacy controls for IAM AI usage, including least-privilege agent access, secrets handling, prompt-injection resistance, sensitive-data redaction and full auditability.
• Monitor AI-assisted IAM automations in production, tune prompts, tools and workflows, and produce operational documentation, runbooks and standard operating procedures while supporting audits and compliance evidence requests.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering or equivalent practical experience.
• 2+ years of hands-on experience implementing or operating Identity and Access Management solutions.
• Experience with at least one enterprise IAM, IGA, PAM or federation platform.
• Understanding of IAM concepts, including identity lifecycle, authentication and authorization, SSO, federation, MFA, RBAC/ABAC, least privilege and privileged access.
• Knowledge of SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP and Kerberos.
• Experience configuring IAM controls, policies, connectors and access-governance workflows.
• Working knowledge of cloud IAM concepts in Azure, AWS or GCP.
• Scripting and automation experience with PowerShell, Python, Bash, REST APIs, SCIM or Terraform.
• Capability to work closely with technical and business stakeholders.
• Competency to follow, maintain and improve defined IAM and security processes, executing changes from tickets, runbooks and designs while escalating design-level questions.
• Practical understanding of AI-assisted productivity and automation, including AI agents, IAM-task automation, LLM integrations, prompt engineering and secure AI usage with sensitive identity data.
• Good communication skills for explaining IAM issues, technical decisions and remediation steps to technical and non-technical stakeholders.

Nice to have

• Familiarity with Microsoft Entra ID, Active Directory, Okta, Ping Identity, ForgeRock, Auth0, SailPoint, Saviynt or CyberArk.
• Experience with CIAM, B2B/B2C, customer, external or partner identity scenarios, and SIEM/SOAR integrations for IAM monitoring, alerting and automated response.
• Experience with CI/CD-based IAM deployment, configuration-as-code and automated testing of IAM changes.
• Familiarity with Azure OpenAI, Amazon Bedrock, Microsoft Copilot Studio, LangChain, AutoGen or Power Automate.
• Understanding of AI security risks, including data leakage, prompt injection, excessive agency, insecure tool use, model governance and sensitive identity-data exposure.
• Relevant certifications, including SC-300, Okta, SailPoint, Saviynt, CyberArk, Ping Identity, CISSP, CISM, CISA, CCSK, CCSP, SSCP, AI-900 or AWS Certified AI Practitioner.

We offer

• Top tech minds driving innovation in AI, cloud and digital platform modernization.
• Supportive team and an agile, startup-like culture.
• Hybrid-by-design mode and opportunity to work remotely within Poland.
• Chance to work abroad for up to 60 days annually.
• Business-driven relocation opportunities.
• Career development programs.
• Thought leadership, mentoring, soft skills and well-being programs.
• Certification opportunities in Anthropic, Gemini, GCP, Azure and AWS.
• English classes.
• Stable pay.
• Participation in the Employee Stock Purchase Plan with a 15% discount.
• Benefits package including health insurance, multisport and shopping vouchers.
• Referral bonuses up to $2,000.
• Offices with entertainment and relaxation zones, table tennis, football, free snacks and coffee.
• Corporate, social and well-being events.

Please note: Only selected candidates will be contacted.