IAM Security Ops Engineer — JML, SSO & Automation

SOFTSWISS; Warszawa; On-site; PLN 90,000 - 130,000; Full time

Benefits offered by this job

Private health insurance

Sports benefits

Comprehensive Mental Health Program

Free English lessons (online)

Local language courses

Paid time off

Maternity leave support

Referral program rewards

Upskilling, internal workshops, andCon

Job summary

SOFTSWISS is seeking an IAM Security Operations Engineer to maintain and troubleshoot IAM services, manage identity lifecycle processes (JML), and ensure secure, role-based access across our systems. The role focuses on supporting SSO, IdP, provisioning flows, and automation using Keycloak and Adaxes.

You will work on complex JML scenarios, RBAC configurations, and proactive IAM health monitoring while collaborating with security teams to uphold standards and minimize risk.

Qualifications

• 2+ years in IAM, identity operations, or security engineering roles.
• Experience maintaining and troubleshooting IAM-related services (Keycloak, Adaxes, GWS).
• Experience with APIs and federation protocols (SAML 2.0, OAuth 2.0, OpenID Connect).
• RBAC configuration and provisioning workflows are familiar.

Responsibilities

• Handle complex and non-standard JML scenarios.
• Troubleshoot IAM services (SSO, IdP, provisioning) including Keycloak.
• Configure and maintain Adaxes automation tool and workflows.
• Implement changes in IAM services and integrations (Keycloak, Adaxes).
• Process JML access requests per RBAC models.
• Automate repetitive access management tasks.
• Validate access requests against least privilege and segregation of duties.
• Write technical and user documentation (models, UML).
• Monitor IAM platform health and identify risks.
• Assist users with access requests per Security standards.

Skills

RBAC configuration and provisioning

Scripting or automation (Python/PowerP

Tools

Keycloak

Adaxes

GWS

Job description

SOFTSWISS is seeking an IAM Security Operations Engineer to maintain and troubleshoot IAM services, manage identity lifecycle processes (JML), and ensure secure, role-based access across our systems. The role focuses on supporting SSO, IdP, provisioning flows, and automation using Keycloak and Adaxes.

You will work on complex JML scenarios, RBAC configurations, and proactive IAM health monitoring while collaborating with security teams to uphold standards and minimize risk.