IAM Security Engineer – Senior

Softswiss; Polska; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Private health insurance

Sports benefits

Free English lessons (online)

Local language courses

Paid time off

Maternity leave support

Referral program rewards

Upskilling, internal workshops, andin

Job summary

Softswiss is seeking an experienced IAM Security Engineer to design, implement, and automate secure identity and access management across enterprise systems. The role focuses on integrations (SCIM, SAML, OAuth, OpenID Connect), lifecycle automation, and secure configuration standards.

You will lead Joiner/Mover/Leaver workflows, implement RBAC/ABAC, and collaborate across CI/CD and IaC pipelines. Strong scripting and API skills are essential for this hands-on security engineering position.

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, or related field.
• Advanced security certifications preferred (e.g., CISSP, CIAM, vendor IAM certifications).

Responsibilities

• Architect and implement IAM integrations using SCIM, SAML, OAuth, OIDC, and APIs.
• Lead automation of access lifecycle management processes.
• Design and implement RBAC/ABAC models across enterprise systems.
• Troubleshoot and resolve complex IAM-related incidents.
• Integrate IAM services into CI/CD and Infrastructure-as-Code workflows.
• Provide technical expertise during identity-related investigations.
• Define secure configuration standards for IAM platforms.
• Develop and maintain high-quality technical documentation.

Skills

SAML 2.0

OAuth 2.0

OpenID Connect

Keycloak administration

Adaxes automation

RBAC/ABAC

REST APIs

PowerShell

Python

Education

Bachelor's/Master's in CS or Info Security

CISSP/CIAM or vendor IAM certs

Tools

Active Directory

PAM integration

Job description

SOFTSWISS continues to expand the team and is looking for an experienced IAM Security Engineer to join us. We are seeking a hands‑on professional with strong expertise in identity and access management, IAM integrations, and access lifecycle automation, who shares our culture and values.

Purpose of the role:

You will be responsible for designing, implementing, and maintaining secure and scalable identity and access management solutions, integrating IAM services across enterprise systems, and automating access lifecycle processes to ensure efficient and secure access management.

Key responsibilities:

• Architect and implement IAM-related integrations using SCIM, SAML, OAuth, OIDC, and APIs.
• Lead automation of access lifecycle management processes.
• Design and implement RBAC/ABAC models across enterprise systems.
• Troubleshoot and resolve complex IAM-related incidents
• Integrate IAM services into CI/CD and Infrastructure-as-Code workflows.
• Provide technical expertise during identity-related investigations.
• Define secure configuration standards for IAM platforms.
• Develop and maintain high-quality technical documentation.

Required Experience:

Skills

• Advanced practical expertise in identity federation and modern authentication/authorization protocols (SAML 2.0, OAuth 2.0, OpenID Connect).
• Deep hands‑on experience with Keycloak administration and configuration, including realm management, client configuration, role mapping, identity brokering, and custom authentication flows.
• Proven ability to design, build, and optimize Joiner/Mover/Leaver (JML) workflows using Adaxes or analog, including automation rules, business logic, and approval flows.
• Strong understanding of RBAC/ABAC implementation patterns.
• Experience designing and implementing secure API integrations (REST APIs, token-based authentication, service-to-service communication).
• Advanced troubleshooting and debugging capabilities across IAM ecosystems.
• Strong automation and scripting skills (e.g., PowerShell, Python, Bash)
• Ability to translate security requirements into scalable IAM solutions.

Knowledge

• Strong knowledge of IAM architecture patterns and federation models.
• In-depth understanding of authentication flows, token lifecycle management, and access control enforcement mechanisms.
• Knowledge of identity lifecycle orchestration patterns and directory service integrations (e.g., Active Directory).
• Familiarity with PAM integration and privileged access governance concepts.

Experience

• 3+ of experience in IAM or security engineering roles within enterprise environments.
• Proven hands‑on experience administering and engineering solutions on the Keycloak platform, including realm design, client configuration, identity brokering, custom authentication flows, role mapping, and token management.
• Experience designing and implementing secure IAM integrations using APIs and federation protocols (SAML 2.0, OAuth 2.0, OpenID Connect).
• Hands‑on experience building and optimizing automated Joiner/Mover/Leaver (JML) workflows using Adaxes, including approval logic and lifecycle orchestration.
• Demonstrated experience improving access lifecycle efficiency through automation and process redesign.
• Experience troubleshooting complex IAM, SSO, and federation-related incidents.
• Experience supporting identity-related security investigations and audit activities.

Education and Qualification

• Bachelor's or Master's degree in Computer Science, Information Security, or related field.
• Advanced security certifications preferred (e.g., CISSP, CIAM, vendor IAM certifications).

Main Advantages

• Private health insurance
• Sports benefits
• Free English lessons (online)
• Local language courses
• Paid time off
• Maternity leave support
• Referral program rewards
• Upskilling, internal workshops, and participation in professional conferences and corporate events