IAM Security Engineer – Senior

SOFTSWISS; Warszawa; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Private health insurance

Sports benefits

Comprehensive Mental Health Program

Free English lessons (online)

Local language courses

Paid time off

Maternity leave support

Referral program rewards

Upskilling, workshops, and conferences

Job summary

SOFTSWISS is seeking an IAM Security Engineer in Warszawa to design, implement, and maintain scalable identity and access management solutions. You will integrate IAM services across enterprise systems and automate lifecycle processes to ensure secure access management.

Responsibilities include architecting SCIM/SAML/OAuth/OIDC integrations, leading JML automation, and enforcing RBAC/ABAC patterns with robust API security and IaC integration.

Qualifications

• 3+ years in IAM or security engineering roles in enterprise environments.
• Hands-on experience administering Keycloak (realm design, client configuration, identity brokering).
• Experience building secure IAM integrations using SAML 2.0, OAuth 2.0, OpenID Connect.

Responsibilities

• Architect and implement IAM integrations using SCIM, SAML, OAuth, OIDC, and APIs.
• Lead automation of access lifecycle management processes.
• Design and implement RBAC/ABAC models across enterprise systems.
• Troubleshoot IAM incidents and complex issues.
• Integrate IAM into CI/CD and IaC workflows.
• Provide expertise during identity-related investigations.
• Define secure configuration standards for IAM platforms.
• Develop and maintain technical documentation.

Skills

Identity federation

RBAC/ABAC

Automation scripting

CI/CD integration

SAML/OAuth/OpenID Connect

Troubleshooting IAM

PowerShell/Python/Bash

IAM architecture

Education

Bachelor’s or Master’s in CS/InfoSec

Tools

Keycloak

Adaxes

SCIM

SAML

OAuth

OIDC

REST APIs

Job description

Overview:

SOFTSWISS continues to expand the team and is looking for an experienced IAM Security Engineer to join us. We are seeking a hands‑on professional with strong expertise in identity and access management, IAM integrations, and access lifecycle automation, who shares our culture and values.

Purpose of the role:

You will be responsible for designing, implementing, and maintaining secure and scalable identity and access management solutions, integrating IAM services across enterprise systems, and automating access lifecycle processes to ensure efficient and secure access management.

Key responsibilities:

• Architect and implement IAM-related integrations using SCIM, SAML, OAuth, OIDC, and APIs.

• Lead automation of access lifecycle management processes.

• Design and implement RBAC/ABAC models across enterprise systems.

• Troubleshoot and resolve complex IAM-related incidents

• Integrate IAM services into CI/CD and Infrastructure-as-Code workflows.

• Provide technical expertise during identity-related investigations.

• Define secure configuration standards for IAM platforms.

• Develop and maintain high‑quality technical documentation.

Required Experience:

Skills

• Advanced practical expertise in identity federation and modern authentication/authorization protocols (SAML 2.0, OAuth 2.0, OpenID Connect).

• Deep hands‑on experience with Keycloak administration and configuration, including realm management, client configuration, role mapping, identity brokering, and custom authentication flows.

• Proven ability to design, build, and optimize Joiner/Mover/Leaver (JML) workflows using Adaxes or analog, including automation rules, business logic, and approval flows.

• Strong understanding of RBAC/ABAC implementation patterns.

• Experience designing and implementing secure API integrations (REST APIs, token‑based authentication, service‑to‑service communication).

• Advanced troubleshooting and debugging capabilities across IAM ecosystems.

• Strong automation and scripting skills (e.g., PowerShell, Python, Bash)

• Ability to translate security requirements into scalable IAM solutions.

Knowledge

• Strong knowledge of IAM architecture patterns and federation models.

• In‑depth understanding of authentication flows, token lifecycle management, and access control enforcement mechanisms.

• Knowledge of identity lifecycle orchestration patterns and directory service integrations (e.g., Active Directory).

• Familiarity with PAM integration and privileged access governance concepts.

Experience

• 3+ of experience in IAM or security engineering roles within enterprise environments.

• Proven hands‑on experience administering and engineering solutions on the Keycloak platform, including realm design, client configuration, identity brokering, custom authentication flows, role mapping, and token management.

• Experience designing and implementing secure IAM integrations using APIs and federation protocols (SAML 2.0, OAuth 2.0, OpenID Connect).

• Hands‑on experience building and optimizing automated Joiner/Mover/Leaver (JML) workflows using Adaxes, including approval logic and lifecycle orchestration.

• Demonstrated experience improving access lifecycle efficiency through automation and process redesign.

• Experience troubleshooting complex IAM, SSO, and federation‑related incidents.

• Experience supporting identity‑related security investigations and audit activities.

Education and Qualification

• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.

• Advanced security certifications preferred (e.g., CISSP, CIAM, vendor IAM certifications).

Our Benefits:

• Private health insurance

• Sports benefits

• Comprehensive Mental Health Program

• Free English lessons (online)

• Local language courses

• Paid time off

• Maternity leave support

• Referral program rewards

• Upskilling, internal workshops, and participation in professional conferences and corporate events