AI-Augmented Identity and Access Management (IAM) Security Engineer

Quick Facts

• Role: AI-Augmented IAM Security Engineer (hands-on IAM delivery and operations)

Description

You will implement, configure, automate, and operate enterprise Identity and Access Management controls under existing IAM architecture standards and policies. The role covers identity lifecycle management, core authentication/authorization capabilities (SSO, federation, MFA/passwordless, conditional access, RBAC/ABAC, least privilege), access governance, and Privileged Access Management. You will also deploy AI-assisted automations and LLM-backed workflows for daily IAM operations with strong security, privacy, verification, and auditability.

Responsibilities

• Implement, configure, and operate IAM solutions and controls based on approved designs and standards

• Maintain identity lifecycle (Joiner/Mover/Leaver) with automated provisioning and deprovisioning across target systems

• Configure core IAM capabilities: SSO, federation, MFA and passwordless authentication, conditional access, RBAC/ABAC role models, least-privilege access

• Build IAM integrations and connectors with cloud platforms, SaaS apps, enterprise systems, directories, authoritative sources, databases, and APIs

• Run access certification/review campaigns, perform entitlement cleanup, and configure segregation-of-duties rules

• Operate Privileged Access Management controls: credential vaulting, secrets rotation, session management, just-in-time/just-enough access

• Develop and deploy automation scripts/workflows and IAM tooling (PowerShell, Python, REST APIs, SCIM, Terraform or similar)

• Monitor IAM platform health; troubleshoot incidents/access issues; perform patching, upgrades, and hardening

• Maintain IAM logging, alerting, and monitoring; execute backup and recovery per runbooks

• Deploy AI-assisted automations/agentic workflows to reduce manual IAM effort (triage, analysis, anomaly detection, RCA support, access review support, compliance evidence collection)

• Integrate AI agents and LLM automations via function calling, SCIM, REST, and webhooks into IAM operational pipelines

• Create reusable prompts and retrieval (e.g., RAG) so AI assistants use current authoritative internal sources

• Add output verification, human-in-the-loop approvals, and rollback paths so AI-driven changes are reviewed before production

• Implement security/privacy controls for IAM AI usage (least-privilege for agents, secret/credential handling, prompt-injection resistance, redaction, full auditability)

• Monitor AI-assisted automations in production, measure accuracy/impact, tune prompts/workflows, and support audits/compliance evidence

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering or equivalent practical experience

• 2+ years hands-on IAM implementation/operation experience

• Experience with at least one enterprise IAM/IGA/PAM/federation platform

• Solid IAM fundamentals (identity lifecycle, authentication/authorization, SSO, federation, MFA, RBAC/ABAC, least privilege, privileged access)

• Knowledge of IAM protocols/standards: SAML, OAuth 2.0, OpenID Connect; SCIM, LDAP, Kerberos

• Experience configuring IAM controls, policies, connectors, and access governance workflows

• Scripting/automation using PowerShell or Python (or comparable: Bash/REST/SCIM/Terraform)

• Ability to collaborate with developers, architects, infrastructure/security operations, compliance, and business stakeholders

• Ability to follow and improve established IAM/security processes, executing changes from tickets/runbooks and escalating design-level questions

• Practical AI automation experience: build AI agents, integrate LLMs with tools/documents, prompt engineering, and use AI securely with awareness of sensitive identity data

• Strong communication skills with technical and non-technical stakeholders

Benefits

• Hybrid-by-design with option for remote work within Poland

• Opportunity to work abroad up to 60 days annually; business-driven relocation opportunities

• Career development programs, mentoring, soft skills and well-being programs

• Certification support (Anthropic, Gemini, GCP, Azure, AWS) and English classes

• Stable pay; Employee Stock Purchase Plan (15% discount)

• Benefits package (health insurance, multisport, shopping vouchers)

• Referral bonuses up to $2,000

• Offices with entertainment/relaxation areas; free snacks and coffee; corporate social/well-being events