AI-Augmented IAM Security Engineer

Quick Facts

• Hands-on IAM delivery and operations role
• Identity lifecycle, IAM controls, PAM, integrations, automation, and AI-assisted agentic workflows

Description

You will implement, configure, automate, and operate enterprise Identity and Access Management based on IAM architects’ and security leadership’s designs, standards, and policies. The role covers identity lifecycle management, core IAM capabilities (SSO, federation, MFA, passwordless, conditional access, RBAC/ABAC, least privilege), privileged access management, integrations/connectors, and operational monitoring/troubleshooting. You will also deploy AI-assisted automations and LLM-backed workflows with verification, human-in-the-loop approval gates, and rollback paths.

Responsibilities

• Implement, configure, and operate IAM solutions and controls from provided architecture, standards, and designs
• Maintain identity lifecycle (Joiner / Mover / Leaver), including automated provisioning and deprovisioning
• Configure core IAM capabilities: SSO, federation, MFA and passwordless authentication, conditional access, RBAC/ABAC, least-privilege access
• Develop and deploy IAM integrations/connectors with cloud, SaaS, directories, authoritative sources, databases, and APIs
• Execute access certification/review campaigns, entitlement clean-up, and segregation-of-duties rules
• Operate PAM controls: credential vaulting, secrets rotation, session management, just-in-time/just-enough access
• Build automation scripts/workflows using PowerShell, Python, REST APIs, SCIM, Terraform (or similar)
• Monitor IAM platform health, troubleshoot incidents and access issues, and perform patching/upgrades/hardening
• Maintain IAM logging/alerting/monitoring; run backup and recovery per runbooks
• Deploy AI-assisted automations and agentic workflows for daily IAM operations (triage, entitlement analysis, anomaly detection, root-cause analysis, review support, compliance evidence/doc generation)
• Integrate AI agents/LLM automations into IAM pipelines using function calling, SCIM, REST, and webhooks
• Build and maintain reusable prompts, structured prompting patterns, prompt templates, and retrieval (e.g., RAG) over IAM policies/role catalogs/runbooks/documentation
• Add output verification, human approval gates, and rollback paths so AI-driven access changes are not applied without review
• Implement security/privacy controls for AI usage: least-privilege for agents, secret/credential handling, prompt-injection resistance, redaction of sensitive identity data, full auditability
• Monitor AI-assisted automations in production, measure accuracy/impact, tune prompts/tools/workflows, and produce operational documentation and runbooks while supporting audits

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience
• 2+ years hands-on IAM implementation/operation experience
• Experience with at least one enterprise IAM/IGA/PAM/federation platform
• IAM concepts knowledge: identity lifecycle, authentication/authorization, SSO, federation, MFA, RBAC/ABAC, least privilege, privileged access
• Knowledge of IAM protocols/standards: SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos
• Experience configuring IAM controls, policies, connectors, and access governance workflows
• Scripting/automation with at least one: PowerShell, Python, Bash, REST APIs, SCIM, Terraform
• Ability to collaborate with developers, architects, infrastructure engineers, security ops, compliance, and business stakeholders
• Ability to follow/maintain/improve defined IAM/security processes; execute changes from tickets/runbooks/designs; escalate design-level questions
• Practical understanding of AI-assisted automation/agents (LLM integration with tools/docs, prompt engineering, secure AI usage with sensitive identity data awareness)
• Communication skills for explaining IAM issues and remediation to technical and non-technical stakeholders

Benefits

• Hybrid-by-design work model with opportunity to work remotely within Poland
• Opportunity to work abroad up to 60 days annually
• Business-driven relocation opportunities
• Career development programs, mentoring, soft skills and well-being programs
• Certification support (Anthropic, Gemini, GCP, Azure, AWS)
• English classes
• Stable pay and Employee Stock Purchase Plan (15% discount)
• Health insurance, multisport, shopping vouchers
• Referral bonuses up to $2,000
• Office perks (entertainment/relaxation zones, table tennis, football, free snacks/coffee)
• Corporate, social, and well-being events