Expert IAM Architect – Cloud & Zero Trust

ITDS; Kraków; Hybrid; PLN 320,000 - 520,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

ITDS is seeking an Expert IAM Architect in Kraków on a hybrid schedule to drive enterprise identity capabilities across authentication, federation, and security architectures. You will shape cloud-native IAM designs for GCP and Kubernetes, implement Zero Trust patterns, and lead governance through Architecture Review Boards while mentoring engineering teams.

Ideal candidates have 8+ years in security or enterprise architecture, deep IAM expertise, and practical experience with OIDC/OAuth2/SAML,

Qualifications

• 8+ years in enterprise or security architecture
• Strong IAM expertise including authentication, authorisation, and federation
• Experience with OIDC, OAuth2, SAML, SCIM
• Practical Zero Trust, Agent Identity, Workload Identity knowledge
• GCP, Kubernetes, service mesh, API architecture, and API security experience
• Event-driven architecture, messaging, asynchronous processing, and Policy-as-Code (OPA/Cedar)
• Knowledge of PKI, certificates, secrets management, DevSecOps, and CI/CD
• Stakeholder management and architecture governance experience

Responsibilities

• Produce high/low level designs for enterprise identity capabilities
• Define end-to-end technical solutions across business, application, data, and infrastructure domains
• Design cloud-native IAM solutions for GCP and Kubernetes environments
• Develop authentication, authorisation, federation, API security, and service-to-service authentication architectures
• Define Zero Trust, secrets management, PKI integration patterns
• Design event-driven integrations, resilience, DR, and high availability
• Lead architecture governance through reviews and ARBs, and promote best practices
• Support engineering teams during implementation, testing, and production readiness while mentoring engineers

Skills

IAM expertise

Cloud security

GCP

Kubernetes

OIDC/OAuth2/SAML

Zero Trust

Policy as Code (OPA/Cedar)

Tools

OAuth2/OIDC tooling

Kubernetes APIs

Job description

Transform global identity security — architect cloud-native IAM solutions built for scale, resilience, and Zero Trust.

Krakow-based opportunity with a hybrid work model, including up to 4 remote days per week.

As an Expert IAM Architect, you will be working for our client, a global banking organisation undertaking a long-term transformation of its Identity and Access Management capabilities. You will help define and deliver secure, scalable, and supportable identity services across authentication, authorisation, federation, human identities, agent identities, and workload identities. This role offers the opportunity to shape enterprise architecture across cloud, Kubernetes, API security, and Zero Trust environments.

Your main responsibilities:

• Produce high-level and low-level designs for enterprise identity capabilities.


• Define end-to-end technical solutions across business, application, data, and infrastructure domains.


• Design cloud-native IAM solutions for GCP and Kubernetes environments.


• Develop authentication, authorisation, federation, API security, and service-to-service authentication architectures.


• Define Zero Trust, Policy-as-Code, secrets management, certificate lifecycle, and PKI integration patterns.


• Design event-driven integrations, resilience, disaster recovery, high availability, and non-functional capabilities.


• Lead architecture governance through design reviews, Architecture Review Boards, technical assurance, and architecture decision records.


• Support engineering teams throughout implementation, testing, and production readiness while mentoring engineers and promoting best practices.

You're ideal for this role if you have:

• At least 8 years of experience in enterprise architecture, security architecture, or a related technical field.


• Strong Identity and Access Management expertise, including authentication, authorisation, and identity federation.


• Experience with OIDC, OAuth2, SAML, and SCIM.


• Practical knowledge of Zero Trust Architecture, Agent Identity, and Workload Identity.


• Expertise in GCP, Kubernetes, service mesh, API architecture, and API security.


• Experience with event-driven architecture, messaging, asynchronous processing, and Policy-as-Code using OPA or Cedar.


• Knowledge of PKI, certificates, secrets management, DevSecOps, and CI/CD.


• Strong stakeholder management, technical leadership, architecture governance, and design review experience.

It is a strong plus if you have:

• Experience designing enterprise IAM solutions within large-scale banking or similarly complex environments.


• Experience defining high availability, resilience, and disaster recovery architectures.


• Experience evaluating technology and vendor products against strategic programme requirements.


• Experience working with Enterprise Architecture, Product Owners, engineering teams, and external suppliers.

Language Required for the role: Fluent English.Eligibility for the role: Only candidates with an existing legal right to work in Europe will be considered for this role.