IAM Security Architect + AI (basic)

EPAM Systems; Polska; In loco; PLN 180.000 - 360.000; Tempo pieno

Descrizione del lavoro

EPAM Systems Inc in Poland seeks an experienced IAM Security Architect + AI to design and implement secure identity architectures across cloud and hybrid environments, incorporating AI-assisted tools to automate IAM processes.

You will define identity lifecycle management, access controls, and governance, evaluate IAM technologies, and collaborate with cloud, security, and enterprise teams to deliver resilient, auditable solutions.

Competenze

• Bachelor's degree or equivalent practical experience in Computer Science, Cybersecurity, or Engineering.
• 5+ years of information security experience focused on IAM, identity security architecture, or IAM engineering.
• Proven experience delivering or contributing to IAM implementations, migrations, or modernizations.

Mansioni

• Design and implement IAM architectures across enterprise, cloud, and hybrid environments.
• Gather requirements for IAM solutions in new implementations or migrations.
• Define IAM capabilities: identity lifecycle, provisioning/deprovisioning, SSO, federation, MFA, PAM, identity governance.

Conoscenze

IAM security architecture

Zero Trust

RBAC ABAC

PAM

MFA

SSO

AI-assisted tools

PowerShell

Python

REST APIs

Terraform

Compliance

Auditing

Communication

Formazione

Bachelor's degree in Computer Science, Cybersecurity, Engineering

Strumenti

Microsoft Entra ID

Active Directory

Okta

Ping Identity

SailPoint

Saviynt

CyberArk

Descrizione del lavoro

We are looking for an experienced and passionate IAM Security Architect + AI (basic) to join our Security team at EPAM.

If you are eager to design modern identity architectures across cloud and hybrid environments while leveraging AI-assisted tools to automate IAM processes, this role is for you.

As an IAM Security Architect, you will play a key role in designing, implementing, and optimizing secure Identity and Access Management (IAM) architectures for our global clients. You will combine traditional identity engineering principles (Zero Trust, RBAC/ABAC, PAM, IGA) with modern AI-assisted tools, ensuring the highest standards of data protection, compliance, and auditability.

Responsibilities

• Security Architecture Design: Design and implement security architectures and controls for Identity and Access Management (IAM) systems across enterprise, cloud, and hybrid environments
• Requirements Gathering: Gather business, technical, and compliance requirements to design IAM solutions for new implementations, migrations, and security improvements
• IAM Capability Development: Define and improve IAM capabilities, including identity lifecycle management, provisioning/deprovisioning, SSO, federation, MFA, privileged access management (PAM), and access governance
• Access Control Modeling: Design and improve authentication, authorization, and access control models, including RBAC, ABAC, least privilege, and Zero Trust principles
• Reviews & Risk Assessment: Conduct IAM security architecture reviews, risk assessments, and access control design evaluations
• Standards & Governance: Develop IAM reference architectures, security standards, access control policies, and identity governance guidelines
• Technology Evaluation: Evaluate IAM technologies and solutions, including identity providers (IdPs), IGA, PAM, federation platforms, and cloud-native identity services
• System Integration: Design and support IAM integrations with cloud platforms, SaaS applications, enterprise systems, directories, and APIs
• Cross-Functional Collaboration: Collaborate with cloud, infrastructure, development, security operations, compliance, and enterprise architecture teams to integrate IAM security into enterprise solutions
• Automation Support: Support IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform, or similar technologies
• AI-Assisted IAM Workflows: Use AI-assisted tools and workflows to improve IAM activities, including identity and access risk analysis, access reviews and entitlement analysis, role and access policy analysis, provisioning workflow optimization, compliance reporting and evidence collection, and security scripting, documentation, and repetitive task automation
• Safe AI Automation: Identify opportunities for AI-assisted IAM automation while ensuring appropriate validation, data protection, auditability, and human oversight
• Stakeholder Communication: Communicate IAM security risks, architectural decisions, and remediation plans to stakeholders and security leadership

Requirements

Education & Experience: Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience 5+ years of information security experience, with a focus on IAM, identity security architecture, or IAM engineering Proven experience delivering or significantly contributing to IAM implementation, migration, integration, or modernization projects

IAM Expertise

• Strong hands-on expertise with at least one enterprise IAM, IGA, PAM, or identity federation platform

Core Principles

• Strong understanding of IAM principles, including identity lifecycle management, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege, and privileged access

Protocols & Standards

• Knowledge of common IAM protocols and standards such as SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, or Kerberos

Tooling Knowledge

• Experience with IAM technologies such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt, CyberArk, or similar solutions

Cloud Security

• Understanding of cloud IAM concepts and identity security controls across at least one major cloud platform (Azure, AWS, or GCP)

Architecture Frameworks

• Understanding of security architecture principles and frameworks such as Zero Trust, NIST, ISO 27001, or similar

SecOps Integration

• Working knowledge of related security domains, including cloud security, network security, application security, data protection, and security operations, without requiring deep specialization in each

AI & Automation Skills

• Intermediate practical experience with AI-assisted tools and automation, including using AI tools for access analysis, security research, and IAM troubleshooting; applying structured prompting for technical and security tasks; generating and validating scripts, queries, access policies, and documentation with AI; using AI to simplify repetitive IAM and security workflows; and basic experience configuring AI-assisted workflows or integrations
• Understanding of safe AI usage, including sensitive identity data protection, access control, auditability, and validation of AI-generated outputs. Willingness to further develop AI automation skills

Soft Skills

• Strong communication and collaboration skills

Must Have

• Hands-on technical proficiency is a must

Nice to have

• Experience with IAM platforms such as Microsoft Entra ID, Okta, Ping Identity, ForgeRock, Auth0, SailPoint, Saviynt, CyberArk, or similar
• Experience with Identity Governance and Administration (IGA), Privileged Access Management (PAM), CIAM, or B2B/B2C identity scenarios
• Experience with cloud identity, workload identities, service principals, managed identities, and hybrid identity architectures
• Experience with IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform, or similar technologies
• Experience integrating IAM solutions with SIEM/SOAR, security monitoring, and automated response workflows
• Experience with AI automation, AI agents, Microsoft Copilot Studio, Azure OpenAI, Amazon Bedrock, Claude, LangChain, Power Automate, or similar tools
• Understanding of AI security risks, including sensitive data exposure, prompt injection, excessive permissions, and insecure AI tool usage
• Relevant Security or IAM certifications AI-related certifications