Senior Cloud-Native Identity Platform Engineer – IAM & Zero Trust

Krakow-based opportunity with a hybrid work model of up to 4 remote days per week.

As a Senior Cloud-Native Identity Platform Engineer – IAM & Zero Trust, you will deliver enterprise-grade, scalable, and secure identity services. The role applies cloud-native and Zero Trust principles to advance Identity and Access Management (IAM) capabilities in the banking sector.

Your main responsibilities

• Lead the engineering delivery of strategic IDAM Next Generation capabilities.
• Translate architecture and solution designs into production-ready implementations.
• Provide technical leadership across multiple engineering teams.
• Define engineering standards, reusable frameworks, and implementation patterns.
• Develop scalable, secure microservices, APIs, and event-driven integrations.
• Implement authentication, authorization, federation services, and Zero Trust security standards.
• Design and develop policies using Policy-as-Code (OPA) and automation for certificate lifecycle management.
• Build resilient Kubernetes-based platforms, ensuring high availability and scalability.
• Develop CI/CD pipelines and promote GitOps deployment practices.
• Collaborate on troubleshooting complex distributed system issues.
• Drive platform observability through logging, monitoring, and telemetry.
• Mentor engineers, support best practices, and promote continuous improvement.
• Collaborate with Architects, Security, and Platform teams to evaluate emerging technologies and improve engineering processes.
• Support operational readiness, production handovers, and technical assurance activities.

You’re ideal for this role if you have

• At least 8 years of enterprise software engineering experience.
• Strong expertise in Identity and Access Management (IAM).
• In-depth knowledge of authentication, authorization, and federation services.
• Hands-on experience with Human, Agent, and Workload Identity.
• Experience implementing Zero Trust architecture.
• Proficiency in cloud-native engineering, particularly GCP.
• Solid background with Kubernetes and Service Mesh technologies.
• Skills in API development and event-driven architecture.
• Knowledge of Infrastructure as Code (IaC) and GitOps practices.
• Experience with CI/CD pipelines and DevSecOps.
• Familiarity with Policy-as-Code (OPA), PKI, secrets management, and certificate authorities.
• Strong understanding of observability, telemetry, and distributed systems performance.
• Proven technical leadership, coaching, and mentoring abilities.
• A positive, solution-oriented approach within complex organizational contexts.

It is a strong plus if you have

• Certifications in cloud platforms or security.
• Experience with service mesh frameworks.
• Additional security or compliance certifications.

Language Required for the role

• Fluent English (written and spoken).

Eligibility for the role

• Only candidates with an existing legal right to work in the European Union will be considered for this role.