AI-Augmented Identity and Access Management (IAM) Security Engineer

Quick Facts

• Hands-on delivery-and-operations IAM security role focused on building, configuring, scripting, automation, and day-to-day support

Description

Implement, configure, automate, and operate enterprise Identity and Access Management (IAM) controls based on designs and standards set by IAM architects and security leadership. Maintain identity lifecycle processes (Joiner/Mover/Leaver) with automated provisioning/deprovisioning, configure core IAM capabilities (SSO, federation, MFA/passwordless, conditional access, RBAC/ABAC, least privilege), and support access governance and privileged access management. Deploy and monitor AI-assisted, LLM-backed automations across daily IAM operations with human-in-the-loop approvals, verification, rollback paths, and required security/privacy safeguards.

Responsibilities

• Implement, configure, and operate IAM solutions and controls
• Maintain identity lifecycle (Joiner/Mover/Leaver) with automated provisioning and deprovisioning
• Configure core IAM capabilities: SSO, federation, MFA, passwordless authentication, conditional access, RBAC/ABAC, least-privilege access
• Develop IAM integrations/connectors with cloud platforms, SaaS applications, enterprise systems, directories, authoritative sources, databases, and APIs
• Execute access certification and review campaigns; perform entitlement clean-up and configure segregation-of-duties rules
• Operate Privileged Access Management: credential vaulting, secrets rotation, session management, just-in-time and just-enough access
• Build automation scripts/workflows using PowerShell, Python, REST APIs, SCIM, Terraform, or similar tools
• Monitor IAM platform health; troubleshoot and resolve incidents and access issues; perform patching/upgrades and hardening
• Maintain IAM logging, alerting, monitoring; run backup and recovery via runbooks
• Deploy AI-assisted automations and agentic workflows to reduce manual effort in IAM operations (triage, entitlement analysis, anomaly detection, root-cause analysis, privileged access review support, compliance evidence and documentation)
• Integrate AI agents and LLM-backed automations into IAM systems using function calling, SCIM, REST, and webhooks
• Build reusable prompts, structured prompting patterns, prompt templates, and retrieval (e.g., RAG) over IAM policies, role catalogs, runbooks, and documentation
• Implement output verification, human-in-the-loop approval gates, and rollback paths for AI-assisted workflows
• Apply security/privacy controls for IAM AI usage (least-privilege for agents, secure credential handling, prompt-injection resistance, redaction of sensitive identity data, auditability)
• Monitor AI-assisted automations in production; measure accuracy and impact; tune prompts/tools/workflows; produce operational documentation and support audits

Benefits

• Hybrid by design with opportunity to work remotely within Poland
• Opportunity to work abroad up to 60 days annually; business-driven relocation opportunities
• Career development programs, mentoring, thought leadership and well-being programs
• Certification support (Anthropic, Gemini, GCP, Azure, AWS) and English classes
• Stable pay and Employee Stock Purchase Plan (15% discount)
• Benefits package (health insurance, Multisport, shopping vouchers) and referral bonuses up to $2,000
• Office perks and corporate social/well-being events

Note: You will be contacted exclusively by selected candidates.