IAM Security Architect: Zero-Trust & Cloud IAM Leader

GlobalLogic; Kraków; On-site; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Empowering Projects

Empowering Growth

DE&I Matters

Career Development

Comprehensive Benefits

Flexible Opportunities

Job summary

GlobalLogic in Kraków is seeking an experienced cybersecurity IAM engineer to design and implement identity and access management architectures for workforce and customer identities, including SSO and MFA, across cloud and hybrid environments.

You will lead migrations between IdPs, implement provisioning and lifecycle controls (OAuth2/OIDC, SAML, SCIM), and help embed IAM within Zero Trust patterns while collaborating with engineering teams.

Qualifications

• 5+ years in IAM / identity security, including architecture experience.
• Hands-on with major identity providers (e.g. Entra ID / Azure AD, Okta, Ping, ForgeRock, Keycloak, AWS IAM).
• Strong with OAuth2, OIDC, SAML, SCIM, federation, SSO and MFA.
• Proven identity-provider migration / consolidation and IAM modernization experience.
• PAM, RBAC / ABAC, authorization and identity lifecycle management.
• Zero Trust, cloud IAM and hybrid environments.
• Good grasp of adjacent security domains and standards (NIST, ISO 27001).
• Working understanding of and hands-on experience with different LLMs, and how AI can support identity security and automation.
• Ability to build AI agents / agentic workflows and integrate them into IAM processes.
• Understanding of how LLMs are embedded into the SDLC
• Awareness of AI / LLM security risks (prompt injection, data exposure).
• Nice to have: relevant certifications (CISSP, vendor IdP certs); scripting / automation.

Responsibilities

• Design and implement IAM architectures (workforce and customer identity, SSO, MFA, federation).
• Lead identity-provider migrations and consolidations between IdPs.
• Build, integrate and upgrade access management, provisioning and lifecycle (OAuth2 / OIDC, SAML, SCIM).
• Design privileged access management (PAM) and least-privilege / authorization models (RBAC / ABAC).
• Embed IAM into Zero Trust architecture and secure cloud patterns.
• Define IAM standards, policies and reference architectures.
• Assess existing identity estates for risks and gaps, and plan remediation or upgrade.
• Contribute to adjacent security topics (application, cloud and data security).
• Advise and support engineering teams during implementation.

Skills

IAM expertise

OAuth2 / OIDC

SAML / SCIM

Zero Trust

IAM migrations

PAM / RBAC / ABAC

AI in IAM

LLMs in SDLC

Security standards

Certifications

Tools

Azure AD / Entra ID

Okta

Ping Identity

Keycloak

ForgeRock

AWS IAM

Job description

GlobalLogic in Kraków is seeking an experienced cybersecurity IAM engineer to design and implement identity and access management architectures for workforce and customer identities, including SSO and MFA, across cloud and hybrid environments.

You will lead migrations between IdPs, implement provisioning and lifecycle controls (OAuth2/OIDC, SAML, SCIM), and help embed IAM within Zero Trust patterns while collaborating with engineering teams.