IAM Security Architect IRC302833

Hitachi Vantara Corporation; Poland; Hybrid; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Learning & Development

Diversity & Inclusion

Career development

Flexible relocation/rotation options

Job summary

GlobalLogic invites an experienced IAM security professional to design and implement architectures for workforce and customer identities, including SSO, MFA, and federation. You will lead IdP migrations and build robust access management, provisioning, and lifecycle processes across cloud and hybrid environments.

Join us to embed IAM in Zero Trust, define standards, and drive security across multiple clients and industries, leveraging AI/LLM to enhance automation and security in the SDLC.

Qualifications

• 5+ years in IAM / identity security, including architecture experience.
• Hands-on with major identity providers (e.g. Azure AD, Okta, Ping, ForgeRock, Keycloak, AWS IAM).
• Strong with OAuth2, OIDC, SAML, SCIM, federation, SSO and MFA.
• Proven identity-provider migration / consolidation and IAM modernization experience.
• PAM, RBAC / ABAC, authorization and identity lifecycle management.
• Zero Trust, cloud IAM and hybrid environments.
• Knowledge of standards (NIST, ISO 27001).
• Awareness of AI/LLM security risks and integration into IAM processes.

Responsibilities

• Design and implement IAM architectures for workforce and customer identities, SSO, MFA, and federation.
• Lead IdP migrations and consolidations between IdPs.
• Build, integrate and upgrade access management, provisioning and lifecycle (OAuth2 / OIDC, SAML, SCIM).
• Design PAM and least-privilege / authorization models (RBAC / ABAC).
• Embed IAM into Zero Trust architecture and secure cloud patterns.
• Define IAM standards, policies and reference architectures.

Skills

IAM architecture

OAuth2 / OIDC / SAML

Zero Trust

Hybrid cloud security

AI/LLM in security

Tools

Azure AD

Okta

PingFederate

ForgeRock

Keycloak

Job description

Description

A cybersecurity engineering team builds and modernizes identity and access management across a large, multi-company technology group and its clients. Projects range from migrating and consolidating identity providers to designing new IAM architectures and upgrading legacy access systems. The work covers workforce and customer identity, single sign-on, privileged access and Zero Trust, across cloud and hybrid environments. Alongside IAM, the role contributes to broader security topics such as application, cloud and data protection. It is a hands-on, design-and-build role in a fast-growing, high-impact area.

Requirements

• 5+ years in IAM / identity security, including architecture experience.
• Hands-on with major identity providers (e.g. Entra ID / Azure AD, Okta, Ping, ForgeRock, Keycloak, AWS IAM).
• Strong with OAuth2, OIDC, SAML, SCIM, federation, SSO and MFA.
• Proven identity-provider migration / consolidation and IAM modernization experience.
• PAM, RBAC / ABAC, authorization and identity lifecycle management.
• Zero Trust, cloud IAM and hybrid environments.
• Good grasp of adjacent security domains and standards (NIST, ISO 27001).
• Working understanding of and hands-on experience with different LLMs, and how AI can support identity security and automation.
• Ability to build AI agents / agentic workflows and integrate them into IAM processes.
• Understanding of how LLMs are embedded into the SDLC
• Awareness of AI / LLM security risks (prompt injection, data exposure).
• Nice to have: relevant certifications (CISSP, vendor IdP certs); scripting / automation.

Job responsibilities

• Design and implement IAM architectures (workforce and customer identity, SSO, MFA, federation).
• Lead identity-provider migrations and consolidations between IdPs.
• Build, integrate and upgrade access management, provisioning and lifecycle (OAuth2 / OIDC, SAML, SCIM).
• Design privileged access management (PAM) and least-privilege / authorization models (RBAC / ABAC).
• Embed IAM into Zero Trust architecture and secure cloud patterns.
• Define IAM standards, policies and reference architectures.
• Assess existing identity estates for risks and gaps, and plan remediation or upgrade.
• Contribute to adjacent security topics (application, cloud and data security).
• Advise and support engineering teams during implementation.

#LI-OT1 #LI-Remote

What we offer

Empowering Projects:

With 500+ clients spanning diverse industries and domains, we provide an exciting opportunity to contribute to groundbreaking projects that leverage cutting-edge technologies. As a team, we engineer digital products that positively impact people's lives.

Empowering Growth:

We foster a culture of continuous learning and professional development. Our dedication is to provide timely and comprehensive assistance for every consultant through our dedicated Learning & Development team, ensuring their continuous growth and success.

DE&I Matters:

At GlobalLogic, we deeply value and embrace diversity. We are dedicated to providing equal opportunities for all individuals, fostering an inclusive and empowering work environment.

Career Development:

Our corporate culture places a strong emphasis on career development, offering abundant opportunities for growth. Regular interactions with our teams ensure their engagement, motivation, and recognition. We empower our team members to pursue their career goals with confidence and enthusiasm.

Comprehensive Benefits:

In addition to equitable compensation, we provide a comprehensive benefits package that prioritizes the overall well-being of our consultants. We genuinely care about their health and strive to create a positive work environment.

Flexible Opportunities:

At GlobalLogic, we prioritize work-life balance by offering flexible opportunities tailored to your lifestyle. Explore relocation and rotation options for diverse cultural and professional experiences in different countries with our company.

About GlobalLogic

GlobalLogic, a Hitachi Group Company, is a trusted digital engineering partner to the world's largest and most forward-thinking companies. Since 2000, we've been at the forefront of the digital revolution - helping create some of the most innovative and widely used digital products and experiences. Today we continue to collaborate with clients in transforming businesses and redefining industries through intelligent products, platforms, and services.