AI-Augmented Identity and Access Management (IAM) Security Engineer

Quick Facts

• Role: AI-Augmented Identity and Access Management (IAM) Security Engineer

Description

Hands-on delivery-and-operations role for implementing, configuring, automating, and running enterprise Identity and Access Management controls. You will manage identity lifecycle processes, SSO/federation/MFA and access governance, operate PAM, and troubleshoot IAM incidents. The role also deploys AI-assisted and LLM-backed automations with human-in-the-loop safeguards, auditability, and security/privacy controls.

Responsibilities

• Implement, configure, and operate IAM solutions and controls based on IAM architects’ and security leadership’s designs and standards

• Maintain identity lifecycle (Joiner/Mover/Leaver) with automated provisioning and deprovisioning

• Configure core IAM capabilities: SSO, federation, MFA, passwordless authentication, conditional access, RBAC/ABAC role models, and least-privilege access

• Develop and deploy IAM integrations and connectors for cloud platforms, SaaS apps, enterprise systems, directories, authoritative sources, databases, and APIs

• Execute access certification/review campaigns, entitlement clean-up, and segregation-of-duties configuration

• Operate Privileged Access Management controls (credential vaulting, secrets rotation, session management, just-in-time/just-enough access)

• Build automation scripts, workflows, and IAM tooling using PowerShell, Python, REST APIs, SCIM, and Terraform

• Monitor IAM platform health, troubleshoot incidents and access issues, and perform patching/upgrades/configuration hardening

• Maintain IAM logging/alerting/monitoring and run backup and recovery procedures from runbooks

• Deploy AI-assisted automations and agentic workflows to reduce manual IAM effort (triage, entitlement analysis, anomaly detection, root-cause analysis support, privileged review support, and compliance evidence generation)

• Integrate AI agents and LLM-backed automations into IAM operational pipelines via function calling, SCIM, REST, and webhooks

• Create reusable prompts and implement retrieval (e.g., RAG) over IAM policies, role catalogs, runbooks, and documentation

• Add output verification, human-in-the-loop approval gates, and rollback paths so AI-driven access changes are never applied without review

• Implement security/privacy controls for IAM AI usage (least-privilege for agents, secrets/credential handling, prompt-injection resistance, redaction of identity data, auditability)

• Monitor AI-assisted automation in production, measure accuracy/impact, tune prompts/workflows, and produce operational documentation/runbooks for audits

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience

• 2+ years of hands-on experience implementing or operating Identity and Access Management solutions

• Experience with at least one enterprise IAM, IGA, PAM, or federation platform

• Understanding of IAM concepts (identity lifecycle, authentication/authorization, SSO, federation, MFA, RBAC/ABAC, least privilege, privileged access)

• Knowledge of IAM protocols/standards: SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos

• Experience configuring IAM controls, policies, connectors, and access governance workflows

• Scripting and automation with at least one of PowerShell, Python, Bash, REST APIs, SCIM, Terraform

• Ability to collaborate with developers, architects, infrastructure engineers, security operations, compliance teams, and business stakeholders

• Ability to follow and improve IAM/security processes, executing changes from tickets/runbooks/designs and escalating design-level questions

• Practical understanding of AI-assisted automation beyond basic chatbots, including building AI agents, integrating LLMs with tools/documents, prompt engineering, and using AI securely with awareness of sensitive identity data

• Communication skills for explaining IAM issues and remediation steps to technical and non-technical stakeholders

Benefits

• Hybrid work model with potential remote work within Poland

• Opportunity to work abroad up to 60 days annually; business-driven relocation options

• Career development programs, mentoring, soft skills and well-being programs

• Certification support and English classes

• Stable pay; Employee Stock Purchase Plan with a 15% discount

• Benefits package: health insurance and multisport; shopping vouchers

• Referral bonuses up to $2,000

• Office events and amenities (entertainment/relaxation zones, sports, free snacks/coffee)

• Corporate, social, and well-being events