Senior IAM Security Engineer

• Design, implement, and maintain secure and scalable identity and access management solutions
• Integrate IAM services across enterprise systems
• Automate access lifecycle processes to ensure efficient and secure access management
• Architect and implement IAM-related integrations using SCIM, SAML, OAuth, OIDC, and APIs
• Lead automation of access lifecycle management processes
• Design and implement RBAC/ABAC models across enterprise systems
• Troubleshoot and resolve complex IAM-related incidents
• Integrate IAM services into CI/CD and Infrastructure-as-Code workflows
• Provide technical expertise during identity-related investigations
• Define secure configuration standards for IAM platforms
• Develop and maintain high-quality technical documentation

• Advanced practical expertise in identity federation and modern authentication/authorization protocols (SAML 2.0, OAuth 2.0, OpenID Connect)
• Deep hands-on experience with Keycloak administration and configuration, including realm management, client configuration, role mapping, identity brokering, and custom authentication flows
• Proven ability to design, build, and optimize Joiner/Mover/Leaver (JML) workflows using Adaxes or analog, including automation rules, business logic, and approval flows
• Strong understanding of RBAC/ABAC implementation patterns
• Experience designing and implementing secure API integrations (REST APIs, token-based authentication, service-to-service communication)
• Advanced troubleshooting and debugging capabilities across IAM ecosystems
• Strong automation and scripting skills, e.g., PowerShell, Python, Bash
• Ability to translate security requirements into scalable IAM solutions
• Strong knowledge of IAM architecture patterns and federation models
• In-depth understanding of authentication flows, token lifecycle management, and access control enforcement mechanisms
• Knowledge of identity lifecycle orchestration patterns and directory service integrations, e.g., Active Directory
• Familiarity with PAM integration and privileged access governance concepts
• 3+ years of experience in IAM or security engineering roles within enterprise environments
• Proven hands-on experience administering and engineering solutions on the Keycloak platform, including realm design, client configuration, identity brokering, custom authentication flows, role mapping, and token management
• Experience designing and implementing secure IAM integrations using APIs and federation protocols (SAML 2.0, OAuth 2.0, OpenID Connect)
• Hands-on experience building and optimizing automated Joiner/Mover/Leaver (JML) workflows using Adaxes, including approval logic and lifecycle orchestration
• Demonstrated experience improving access lifecycle efficiency through automation and process redesign
• Experience troubleshooting complex IAM, SSO, and federation-related incidents
• Experience supporting identity-related security investigations and audit activities
• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field

• Private health insurance
• Sports benefits
• Comprehensive Mental Health Program
• Free English lessons (online)
• Local language courses
• Paid time off
• Maternity leave support
• Referral program rewards
• Upskilling, internal workshops, and participation in professional conferences and corporate events