IAM Solution Architect

Antal; Kraków; Hybrid; PLN 248,000 - 262,000; Full time

Job summary

Antal is seeking an experienced IAM Solution Architect to join a large-scale international Identity & Access Management transformation programme in Kraków. The role focuses on designing modern, scalable and secure IAM solutions covering human, machine and workload identities.

You will work in a hybrid setup, with 6 days per month from the client’s office, and engage with architecture governance, security and engineering teams to deliver end-to-end IAM architectures and secure integrations.

Qualifications

• Strong experience in Enterprise Solution Architecture.
• Extensive experience with Identity & Access Management.
• Strong understanding of Authentication & Authorization.
• Hands-on knowledge of OAuth2 / OIDC.
• Experience with Workload / Machine Identity.
• Good understanding of Zero Trust Architecture.
• Experience with GCP and Kubernetes.
• Experience in API Architecture / API Security.
• Knowledge of DevSecOps and CI/CD.
• Experience designing scalable, resilient and highly available systems.
• Strong communication and stakeholder management skills.

Responsibilities

• Design end-to-end IAM architectures and create HLDs/LLDs.
• Define authentication, authorization and federation solutions.
• Design solutions for Human, Machine, Workload and Agent Identity.
• Design cloud-native solutions using GCP and Kubernetes.
• Define API security and service-to-service / workload authentication patterns.
• Drive Zero Trust architecture and security patterns.
• Define IAM integrations, reference architectures and technical standards.
• Support engineering teams throughout implementation and production readiness.
• Participate in architecture governance, design reviews and roadmap planning.
• Collaborate with architects, security, engineering and business stakeholders.

Skills

Identity & Access Management

OAuth2 / OIDC

GCP

Kubernetes

Zero Trust

API Security

DevSecOps

Enterprise Architecture

Stakeholder Management

Job description

We are looking for an experienced IAM Solution Architect to join a large-scale international Identity & Access Management transformation programme.

The role focuses on designing modern, scalable and secure IAM solutions covering human, machine and workload identities, with a strong focus on Zero Trust, GCP and Kubernetes.

• Hybrid: 6 days per month from the client’s office in Kraków
• B2B contract via Antal
• Rate: up to 180-190 PLN net/h

Responsibilities

• Design end-to-end IAM architectures and create HLDs/LLDs
• Define authentication, authorization and federation solutions
• Design solutions for Human, Machine, Workload and Agent Identity
• Design cloud-native solutions using GCP and Kubernetes
• Define API security and service-to-service / workload authentication patterns
• Drive Zero Trust architecture and security patterns
• Define IAM integrations, reference architectures and technical standards
• Support engineering teams throughout implementation and production readiness
• Participate in architecture governance, design reviews and roadmap planning
• Collaborate with architects, security, engineering and business stakeholders

Requirements

• Strong experience in Enterprise Solution Architecture
• Extensive experience with Identity & Access Management
• Strong understanding of Authentication & Authorization
• Hands-on knowledge of OAuth2 / OIDC
• Experience with Workload / Machine Identity
• Good understanding of Zero Trust Architecture
• Experience with GCP and Kubernetes
• Experience in API Architecture / API Security
• Knowledge of DevSecOps and CI/CD
• Experience designing scalable, resilient and highly available systems
• Strong communication and stakeholder management skills

Nice to Have

• SAML / SCIM
• Agent Identity
• Service Mesh
• Policy-as-Code (OPA / Cedar)
• Event-driven architecture
• PKI, certificate and secrets management
• IAM transformation programmes in large enterprises
• Banking / financial services / regulated environments

What’s in it for you?

• Long-term international IAM transformation programme
• Real influence on target architecture and technology standards
• Modern technology stack: IAM, Zero Trust, GCP, Kubernetes and Workload Identity
• Collaboration with experienced architecture, security and engineering teams