IAM Security Architect + AI (basic)

EPAM Systems; Kraków; Hybrid; PLN 250,000 - 420,000; Full time

Benefits offered by this job

Health insurance

English classes

Employee Stock Purchase Plan with 15%–

Relocation opportunities

Multisport

Job summary

EPAM Systems Inc is seeking an experienced IAM Security Architect + AI (basic) to design and implement secure Identity and Access Management architectures across cloud and hybrid environments. You will leverage AI-assisted tools to automate IAM processes and collaborate with cross-functional teams to integrate IAM security into enterprise solutions.

You will work on RBAC/ABAC, SSO, MFA, PAM, and identity governance while applying Zero Trust and other security principles.

Qualifications

• Bachelor's degree or equivalent practical experience in a relevant field
• 5+ years of information security experience focusing on IAM/identity security architecture or IAM engineering
• Hands-on experience with at least one enterprise IAM/IGA/PAM or identity federation platform
• Knowledge of IAM protocols and standards (SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos)
• Experience with AI-assisted tools and automation for IAM workflows

Responsibilities

• Design and implement IAM architectures for enterprise, cloud, and hybrid environments
• Gather business, technical, and compliance requirements for IAM solutions
• Define and improve IAM capabilities: identity lifecycle, provisioning/deprovisioning, SSO, federation, MFA, PAM, identity governance
• Design and optimize authentication/authorization and access control models (RBAC, ABAC, least privilege, Zero Trust)
• Conduct IAM security architecture reviews and risk assessments
• Develop IAM reference architectures, standards, and governance guidelines
• Evaluate IAM technologies (IdPs, IGA, PAM, federation platforms, cloud-native identity services)
• System integration: IAM with cloud platforms, SaaS, directories, and APIs
• Collaborate with cross-functional teams to embed IAM in enterprise solutions
• Support IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform
• Explore AI-assisted IAM workflows and validate outputs with proper governance

Skills

IAM security architecture

AI-assisted tools

PowerShell

Python

REST APIs

SCIM

Terraform

RBAC/ABAC

SSO

MFA

Education

Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent

Tools

Microsoft Entra ID

Active Directory

Okta

Ping Identity

SailPoint

Saviynt

CyberArk

Job description

We are looking for an experienced and passionate IAM Security Architect + AI (basic) to join our Security team at EPAM. If you are eager to design modern identity architectures across cloud and hybrid environments while leveraging AI-assisted tools to automate IAM processes, this role is for you.

As an IAM Security Architect, you will play a key role in designing, implementing, and optimizing secure Identity and Access Management (IAM) architectures for our global clients. You will combine traditional identity engineering principles (Zero Trust, RBAC/ABAC, PAM, IGA) with modern AI-assisted tools, ensuring the highest standards of data protection, compliance, and auditability.

Responsibilities

• Security Architecture Design: Design and implement security architectures and controls for Identity and Access Management (IAM) systems across enterprise, cloud, and hybrid environments
• Requirements Gathering: Gather business, technical, and compliance requirements to design IAM solutions for new implementations, migrations, and security improvements
• IAM Capability Development: Define and improve IAM capabilities, including identity lifecycle management, provisioning/deprovisioning, SSO, federation, MFA, privileged access management (PAM), and access governance
• Access Control Modeling: Design and improve authentication, authorization, and access control models, including RBAC, ABAC, least privilege, and Zero Trust principles
• Reviews & Risk Assessment: Conduct IAM security architecture reviews, risk assessments, and access control design evaluations
• Standards & Governance: Develop IAM reference architectures, security standards, access control policies, and identity governance guidelines
• Technology Evaluation: Evaluate IAM technologies and solutions, including identity providers (IdPs), IGA, PAM, federation platforms, and cloud-native identity services
• System Integration: Design and support IAM integrations with cloud platforms, SaaS applications, enterprise systems, directories, and APIs
• Cross-Functional Collaboration: Collaborate with cloud, infrastructure, development, security operations, compliance, and enterprise architecture teams to integrate IAM security into enterprise solutions
• Automation Support: Support IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform, or similar technologies
• AI-Assisted IAM Workflows: Use AI-assisted tools and workflows to improve IAM activities, including identity and access risk analysis, access reviews and entitlement analysis, role and access policy analysis, provisioning workflow optimization, compliance reporting and evidence collection, and security scripting, documentation, and repetitive task automation
• Safe AI Automation: Identify opportunities for AI-assisted IAM automation while ensuring appropriate validation, data protection, auditability, and human oversight
• Stakeholder Communication: Communicate IAM security risks, architectural decisions, and remediation plans to stakeholders and security leadership

Requirements

• Education & Experience: Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience
• 5+ years of information security experience, with a focus on IAM, identity security architecture, or IAM engineering
• Proven experience delivering or significantly contributing to IAM implementation, migration, integration, or modernization projects
• IAM Expertise: Strong hands-on expertise with at least one enterprise IAM, IGA, PAM, or identity federation platform
• Core Principles: Strong understanding of IAM principles, including identity lifecycle management, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege, and privileged access
• Protocols & Standards: Knowledge of common IAM protocols and standards such as SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, or Kerberos
• Tooling Knowledge: Experience with IAM technologies such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt, CyberArk, or similar solutions
• Cloud Security: Understanding of cloud IAM concepts and identity security controls across at least one major cloud platform (Azure, AWS, or GCP)
• Architecture Frameworks: Understanding of security architecture principles and frameworks such as Zero Trust, NIST, ISO 27001, or similar
• SecOps Integration: Working knowledge of related security domains, including cloud security, network security, application security, data protection, and security operations, without requiring deep specialization in each
• AI & Automation Skills: Intermediate practical experience with AI-assisted tools and automation, including using AI tools for access analysis, security research, and IAM troubleshooting; applying structured prompting for technical and security tasks; generating and validating scripts, queries, access policies, and documentation with AI; using AI to simplify repetitive IAM and security workflows; and basic experience configuring AI-assisted workflows or integrations
• Safe AI Usage: Understanding of safe AI usage, including sensitive identity data protection, access control, auditability, and validation of AI-generated outputs. Willingness to further develop AI automation skills
• Soft Skills: Strong communication and collaboration skills
• Must Have: Hands-on technical proficiency is a must

Nice to have

• Experience with IAM platforms such as Microsoft Entra ID, Okta, Ping Identity, ForgeRock, Auth0, SailPoint, Saviynt, CyberArk, or similar
• Experience with Identity Governance and Administration (IGA), Privileged Access Management (PAM), CIAM, or B2B/B2C identity scenarios
• Experience with cloud identity, workload identities, service principals, managed identities, and hybrid identity architectures
• Experience with IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform, or similar technologies
• Experience integrating IAM solutions with SIEM/SOAR, security monitoring, and automated response workflows
• Experience with AI automation, AI agents, Microsoft Copilot Studio, Azure OpenAI, Amazon Bedrock, Claude, LangChain, Power Automate, or similar tools
• Understanding of AI security risks, including sensitive data exposure, prompt injection, excessive permissions, and insecure AI tool usage
• Relevant Security or IAM certifications
• AI-related certifications

We offer

• We gather like-minded people:
• Top tech minds driving innovation in AI, cloud and digital platform modernization
• Supportive team and agile, startup-like culture
• Hybrid by design mode and opportunity to work remotely within Poland
• Chance to work abroad for up to 60 days annually
• Business-driven relocation opportunities
• We provide growth opportunities:
• Career development programs
• Thought leadership, mentoring, soft skills and well-being programs
• Certification (Anthropic, Gemini, GCP, Azure, AWS)
• English classes
• We cover it all:
• Stable pay
• Participation in the Employee Stock Purchase Plan with a 15% discount
• Benefits package (health insurance, multisport, shopping vouchers)
• Referral bonuses up to $2,000
• Offices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and more
• Corporate, social and well-being events
• Please, note:
• Benefits listed above are available to employees only
• We are open for working with Contractors. Terms of B2B cooperation agreements are agreed individually
• We will reach out to selected candidates exclusively

EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.