AI-Augmented IAM Security Engineer

Quick Facts

• Role: AI-Augmented IAM Security Engineer (delivery & operations)
• Focus: Hands-on implementation, configuration, automation, and day-to-day operation of enterprise IAM

Description

You will implement and operate IAM solutions and controls based on standards and designs set by IAM architects and security leadership. Responsibilities include identity lifecycle automation, core IAM capabilities (SSO, federation, MFA/passwordless, conditional access, RBAC/ABAC, least-privilege), PAM controls, integrations, monitoring, incident troubleshooting, and resilience activities. The role also deploys AI-assisted and LLM-backed automations for daily IAM operations with human-in-the-loop approvals, verification, rollback paths, and strong security/privacy safeguards.

Responsibilities

• Implement, configure, and operate IAM solutions and controls
• Maintain identity lifecycle (Joiner/Mover/Leaver) with automated provisioning/deprovisioning
• Configure SSO, federation, MFA/passwordless, conditional access, RBAC/ABAC, and least-privilege access models
• Develop and deploy IAM integrations/connectors with cloud platforms, SaaS, enterprise systems, directories, authoritative sources, databases, and APIs
• Run access certification/review campaigns, entitlement cleanup, and configure SoD rules
• Operate Privileged Access Management: credential vaulting, secrets rotation, session management, JIT/JEA
• Build automation scripts, workflows, and IAM tooling
• Monitor IAM platform health; troubleshoot incidents and access issues; handle patching/upgrades and hardening
• Maintain IAM logging/alerting/monitoring; run backup and recovery per runbooks
• Deploy AI-assisted automations and agentic workflows (triage, entitlement analysis, anomaly detection, root-cause analysis, privileged review support, compliance evidence and documentation)
• Integrate AI agents/LLM automations into IAM operational pipelines using function calling, SCIM, REST, and webhooks
• Use retrieval over authoritative IAM policies, role catalogs, runbooks, and documentation (e.g., RAG)
• Implement output verification, approval gates, and rollback paths so no AI-driven change reaches production without review
• Apply security and privacy controls for IAM AI usage (least-privilege for agents, secret handling, prompt-injection resistance, redaction, full auditability)
• Monitor accuracy/impact in production; tune prompts/workflows; produce runbooks and SOPs; support audits and evidence requests

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering or equivalent practical experience
• 2+ years of hands-on experience implementing or operating IAM solutions
• Experience with at least one enterprise IAM/IGA/PAM/federation platform
• Understanding of IAM concepts including identity lifecycle, authentication/authorization, SSO, federation, MFA, RBAC/ABAC, least privilege, and privileged access
• Knowledge of IAM protocols/standards: SAML, OAuth 2.0, OpenID Connect, plus SCIM, LDAP, Kerberos
• Experience configuring IAM controls, policies, connectors, and access governance workflows
• Scripting/automation using at least one of PowerShell, Python, Bash, REST APIs, SCIM, Terraform
• Ability to work closely with developers, architects, infrastructure/security operations, compliance, and business stakeholders
• Ability to follow/maintain/improve IAM/security processes via tickets/runbooks/designs and escalate design-level questions
• Practical understanding of AI-assisted automation beyond basic chatbots (AI agents, LLM tool/document integration, prompt engineering, secure AI usage with sensitive identity data awareness)
• Communication skills for technical and non-technical stakeholders

Benefits

• Hybrid by design with potential remote work from Poland
• Opportunity to work abroad up to 60 days annually
• Business-driven relocation opportunities
• Career development programs and mentoring
• Certification support (e.g., Anthropic, Gemini, GCP, Azure, AWS)
• English classes
• Stable pay and Employee Stock Purchase Plan (15% discount)
• Benefits package (health insurance, multisport, shopping vouchers)
• Referral bonuses up to $2,000
• Office amenities and events (entertainment/relaxation zones, table tennis/football, free snacks/coffee, corporate social and well-being events)