IAM Architect: Zero Trust + Cloud (GCP/K8s)

ITDS Polska Sp. z o.o.; Kraków; Hybrid; PLN 230,000 - 340,000; Full time

Benefits offered by this job

Hybrid work model

Medical package

Multisport program

Pluralsight access

Flexible hours

Job summary

ITDS Polska Sp. z o.o. is seeking an IAM Solution Architect to lead design of identity capabilities for a major financial client.

The role focuses on high-level and low-level solution architectures across domains, translating requirements into secure technical solutions. You will develop reference architectures, define integration patterns, and architect cloud-native solutions for GCP and Kubernetes, establishing Zero Trust and federation standards while mentoring engineers in a global, hybrid

Qualifications

• Minimum 8 years of enterprise solution architecture experience, focused on IAM.
• Strong expertise in authentication and authorization design.
• Proven experience with Zero Trust architecture.
• Hands-on knowledge of cloud environments, especially GCP and Kubernetes.
• Skills in identity federation protocols: OIDC, OAuth2, SAML, SCIM.
• Deep understanding of API architecture, security, and event-driven systems.
• Proficiency in Policy-as-Code (OPA/Cedar), PKI, certificates, and secrets management.
• Experience designing high availability, resilience, and disaster recovery solutions.
• Strong stakeholder management and technical leadership abilities.

Responsibilities

• Design high-level and low-level solution architectures for identity capabilities across domains.
• Translate business, security, and regulatory requirements into robust technical solutions.
• Develop reference architectures, patterns, and standards for the program.
• Define integration patterns for identity platforms, applications, and infrastructure.
• Architect cloud-native solutions for GCP and Kubernetes environments.
• Design authentication, authorization, and federation architectures.
• Develop policies for Agent, Human, and Workload Identity capabilities.
• Establish Zero Trust security architecture and trust boundaries.
• Outline API security, service-to-service authentication, and workload authentication standards.
• Create event-driven architectures utilizing messaging and asynchronous processing.
• Support governance with architecture review procedures and design documentation.
• Collaborate with engineering teams to ensure successful implementation, testing, and deployment.
• Mentor engineers and uphold best practices in engineering.
• Evaluate emerging technologies for alignment with project goals and future roadmap planning.]
• CoT_job_summary_short: "COMPANY NAME: ITDS Polska Sp. z o.o.\nKEY POINTS: IAM architecture, Zero Trust, GCP/Kubernetes, hybrid Kraków"
• job_summary_short":"<p>ITDS Polska Sp. z o.o. is seeking an IAM Solution Architect to lead design of identity capabilities for a major financial client. The role focuses on high-level and low-level solution architectures across domains, translating requirements into secure technical solutions.</p><p>You will develop reference architectures, define integration patterns, and architect cloud-native solutions for GCP and Kubernetes, establishing Zero Trust and federation standards while mentoring engineers in a global, hybrid Krakow-based program.</p>",
• contract_type
• location_type
• remote_scope
• perks
• stated_min
• stated_max
• stated_absolute
• salary_estimation_cot
• estimated_low
• estimated_medium
• estimated_high
• currency
• frequency
• bonus
• tax
• application_email
• job_end_date
• contact_person
• hiring_department_name

Skills

IAM architecture

Authentication design

Zero Trust

Identity federation

API security

Policy-as-Code

PKI & certificates

Secrets management

HA & DR

Stakeholder management

Tools

GCP

Kubernetes

Job description

ITDS Polska Sp. z o.o. is seeking an IAM Solution Architect to lead design of identity capabilities for a major financial client.

The role focuses on high-level and low-level solution architectures across domains, translating requirements into secure technical solutions. You will develop reference architectures, define integration patterns, and architect cloud-native solutions for GCP and Kubernetes, establishing Zero Trust and federation standards while mentoring engineers in a global, hybrid