Senior IAM Engineer | SEB, Solna

SEB; Pargas; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

International environment

Hybrid work model

Training opportunities

Friendly culture

Competitive compensation

Job summary

SEB's IAM Platform team is seeking a Senior IAM Engineer to design, build and operate identity and access management across on‑prem and cloud environments. You will collaborate with development, security, cloud and infrastructure teams to deliver scalable, secure IAM solutions and support SEB's cloud journey.

Responsibilities include designing architectures, operating IAM platforms, enabling secure onboarding, troubleshooting identity issues, and continuously improving security posture.

Qualifications

• 5+ years experience IAM engineering, expert in access management tools.
• Knowledge of networking fundamentals: TLS, DNS, proxies, firewalls, VPNs.
• Certificate management and PKI, incl. SSL/TLS certificates.
• Identity federation tech: OpenID Connect, OAuth2.
• Experience with multiple IDP solutions (e.g., Azure AD, Keycloak, Curity).
• SSO and Multi-Factor Authentication knowledge.
• DevSecOps tools: Kubernetes, Docker, Git, GitHub Actions.
• Programming: Java, Python, Go, Spring, JavaScript.
• Linux, Idap, OpenShift, and IaC: Terraform, Ansible, Helm.
• Hybrid/multi-cloud environments; secure cross-cloud integration.
• Hands-on with enterprise identity platforms like Entra ID, Keycloak, Curity.
• Strong troubleshooting across complex IT environments.

Responsibilities

• Designing and implementing IAM solutions and architectures
• Operating and evolving IAM platforms and infrastructure
• Supporting cloud onboarding with secure IAM patterns
• Troubleshooting identity issues and ensuring policy compliance
• Improving security posture in collaboration with cross-functional teams

Job description

The IAM Platform team is now looking for a new team member. We work closely together and share the passion for great technology and creating a smooth engineering experience. Our group consists of people with different expertise, experiences, age and background. We have an open and friendly approach towards each other.

About the role:

At this position within Integrations & Connectivity, you will join a highly skilled IAM team responsible for designing, building, and operating SEB’s Identity and Access Management platforms across both on-prem and cloud environments. The team works with modern IAM technologies, strong security practices, and deeply integrated solutions that are part of SEB’s DevOps toolchains and digital platforms.

As a Senior IAM Engineer, you will take an active role in evolving our IAM platforms by analyzing needs, designing architecture, and implementing robust technical solutions. IAM is a highly prioritized area at SEB, which means close collaboration with development teams, security, cloud, and infrastructure units across the organization. You will also be a key contributor to SEB’s cloud journey, ensuring that IAM capabilities support scalable, secure, and compliant cloud services.

You will be responsible for:

• Designing and implementing IAM solutions and architectures
• Operating and evolving IAM platforms and infrastructure
• Supporting cloud and platform onboarding with secure IAM patterns
• Troubleshooting identity related issues and ensuring compliance with security policies
• Continuously improving the organization’s overall security posture in close collaboration with cross- functional teams

To thrive in this role, we believe you have:

• 5 years or more experience within IAM engineering. Expert and hands on experience on access management tools
• Good knowledge of networking fundamentals (TLS, DNS, proxies, firewalls, VPNs)
• Advanced knowledge of certificate management and PKI, including handling SSL/TLS certificates
• Advanced knowledge with identity federation technology (ex. OpenID Connect, OAuth2).
• Experience on managing different IDP solutions (Identity providers)
• Good knowledge with Single Sign-On and Multi Factor Authentication solution (ex. FIDO2).
• Advanced knowledge with DevSecOps tools (e.g. managing platforms with Kubernetes, Docker, Git, Github actions).
• Advanced knowledge in programming languages, such as Java, Python, Go, Spring or Javascript.
• Good knowledge in Linux, Idap, Openshift and Infra-as-code (Terraform, Ansible and Helm)
• Experience working in hybrid and multi-cloud enterprise environments, including secure integration across multiple cloud providers and on-premises platforms.
• Hands-on experience with one or more enterprise identity platforms, such as Microsoft Entra ID (Azure AD), Keycloak, or Curity.
• Experience operating within complex and highly integrated IT environments.
• Advanced troubleshooting capabilities and a deep understanding of IT infrastructure with the ability to diagnose and resolve complex identity and access issues across diverse systems and environments.

What we offer:

• An international and empowering environment with highly skilled colleagues.
• Work-life balance & hybrid way of working.
• Extensive training and learning opportunities.
• Friendly and welcoming culture.
• Exciting opportunity to be part of transforming an industry.
• Attractive compensation and benefits.

Do you want to be part of SEB?

It is our fundamental belief that inclusion and diversity is crucial to our future success. We strive to have an inclusive, value-driven culture where employees feel valued, respected and involved irrespective of who they are, what they believe or where they come from.

Since we select candidates continuously, feel free to send in your application today.. If you have questions about the position, please contact our talent acquisition partner [e-mail] not that we will not process applications via email.

Please be aware that our final candidates undergo background checks, a process that includes for example identity control, verification of qualifications, credit checks, company engagements and history of crime. In some cases, we also apply random drug checks. During employment, employees within SEB can also expect to undergo recurring background checks.

SEB Sweden has a redeployment responsibility, why this position might be covered by internal redeployment

Learn more about working at SEB here: sebgroup.com/techcareers

https://sebgroup.com/career

https://bit.ly/SEBcareer