AI-Augmented IAM Security Engineer

Quick Facts

• Hands-on IAM delivery and operations role
• Focus on implementing, configuring, automating, and running enterprise Identity and Access Management
• Works within IAM architect and security leadership designs, standards, role models, and policies

Description

You will implement and operate IAM solutions and controls, including automated identity lifecycle processes (Joiner/Mover/Leaver), core IAM capabilities such as SSO, federation, MFA, passwordless authentication, conditional access, and RBAC/ABAC with least-privilege access. You will build and deploy IAM integrations and connectors, and develop AI-assisted, LLM-backed automations to reduce manual effort across daily IAM operations (e.g., access request triage, entitlement analysis, anomaly detection, review support, and compliance evidence generation). The role also covers monitoring, troubleshooting, patching/upgrades, IAM logging/alerting, and backup/recovery while integrating AI with verification, human-in-the-loop approvals, rollback paths, and full auditability.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering or equivalent practical experience
• 2+ years of hands-on experience implementing or operating IAM solutions
• Experience with at least one enterprise IAM, IGA, PAM, or federation platform
• Understanding of IAM concepts: identity lifecycle, authentication/authorization, SSO, federation, MFA, RBAC/ABAC, least privilege, privileged access
• Knowledge of IAM protocols/standards: SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos
• Experience configuring IAM controls, policies, connectors, and access governance workflows
• Scripting and automation experience with at least one of PowerShell, Python, Bash, REST APIs, SCIM, or Terraform
• Ability to follow and improve defined IAM/security processes using tickets and runbooks; escalate design-level questions
• Practical AI-assisted automation experience beyond basic chatbot usage: building AI agents, integrating LLMs with tools/documents, prompt engineering, and secure AI usage with awareness of sensitive identity data
• Strong communication skills for technical and non-technical stakeholders

Hard Skills & Technologies

• SSO, Federation, MFA, PasswordlessAuthentication, ConditionalAccess
• RBAC, ABAC, LeastPrivilege
• PrivilegedAccessManagement (CredentialVaulting, SecretsRotation, SessionManagement, JustInTimeAccess, JustEnoughAccess)
• IdentityLifecycle automation (Provisioning, Deprovisioning)
• SAML, OAuth2, OpenIDConnect, SCIM, LDAP, Kerberos
• PowerShell, Python, Bash, RESTAPI, Terraform
• AI/LLM (AgenticWorkflows, PromptEngineering, RAG, FunctionCalling, Webhooks)
• Monitoring, Logging, Alerting, BackupAndRecovery, Patching, Upgrades, ConfigurationHardening

Benefits

• Stable pay and Employee Stock Purchase Plan (15% discount)
• Benefits package (health insurance, multisport, shopping vouchers)
• Referral bonuses up to $2,000
• Hybrid-by-design, with remote work opportunity within Poland
• Chance to work abroad up to 60 days annually and business-driven relocation opportunities
• Career development programs, mentoring, soft skills and well-being programs
• Certification support and English classes
• Corporate, social, and well-being events