Lead IAM Engineer

EPAM Systems, Inc.; Poland; Hybrid; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Hybrid by design

Job summary

EPAM Systems, Inc. is seeking a Lead IAM Engineer to drive the IAMConnect platform, designing cloud-native identity solutions and secure integrations with enterprise IAM ecosystems.

You will implement authentication/authorization using Microsoft Entra ID, OAuth2, OIDC, JWT; develop on AKS; work with SailPoint IdentityIQ and Identity Security Cloud APIs. Join a collaborative team delivering scalable, AI-enabled IAM components.

Qualifications

• Bachelor's or Master's degree in Computer Science, Software Engineering, Information Security, or related field
• 7+ years of software engineering experience in enterprise environments
• Proficiency in Python, C#, Java, or similar technologies
• Knowledge of SailPoint IdentityIQ
• Background in developing REST APIs and microservices
• Expertise in Azure cloud services, Kubernetes, and containerized applications
• Skills in Microsoft Entra ID authentication and authorization models
• Understanding of OAuth2, OIDC, JWT, and API security
• Competency in CI/CD pipelines and DevOps practices
• Ability to integrate enterprise platforms through APIs
• Excellent command of written and spoken English (B2+ level)

Responsibilities

• Design, develop, and maintain IAMConnect platform components
• Develop and operate MCP server services and API integrations
• Build integrations with SailPoint IdentityIQ and Identity Security Cloud APIs
• Implement authentication and authorization patterns using Microsoft Entra ID, OAuth2, OIDC, JWT, and OBO flows
• Develop and maintain cloud-native workloads running on Azure Kubernetes Service (AKS)
• Implement authorization policies using Open Policy Agent (OPA) and Rego
• Create secure integrations with Azure Key Vault and Managed Identities
• Contribute to Teams and Copilot Studio conversational experiences
• Establish automated testing, CI/CD pipelines, and deployment processes
• Troubleshoot performance, reliability, and integration issues across IAM and AI ecosystems
• Collaborate closely with architects, IAM engineers, security teams, platform teams, and product stakeholders

Skills

Python

C#

Java

REST APIs & microservices

CI/CD

Team collaboration

English communication

Education

Bachelor's or Master's degree in Computer Science/Software Engineering/Information Security

Tools

Azure

Kubernetes

OAuth2/OIDC/JWT

Azure Key Vault/Managed Identities

SailPoint IdentityIQ

Identity Security Cloud APIs

Open Policy Agent (OPA)

Rego

Job description

We are seeking a Lead IAM Engineer to join our team and drive the development of our IAMConnect platform.In this role, you will design and build modern, cloud-native identity solutions that integrate cutting-edge AI capabilities with enterprise-grade IAM ecosystems. You will collaborate with cross-functional teams to deliver secure, scalable, and innovative platform components that empower our organization's identity and access management strategy.ResponsibilitiesDesign, develop, and maintain IAMConnect platform componentsDevelop and operate MCP server services and API integrationsBuild integrations with SailPoint IdentityIQ and Identity Security Cloud APIsImplement authentication and authorization patterns using Microsoft Entra ID, OAuth2, OIDC, JWT, and OBO flowsDevelop and maintain cloud-native workloads running on Azure Kubernetes Service (AKS)Implement authorization policies using Open Policy Agent (OPA) and RegoCreate secure integrations with Azure Key Vault and Managed IdentitiesContribute to Teams and Copilot Studio conversational experiencesEstablish automated testing, CI/CD pipelines, and deployment processesTroubleshoot performance, reliability, and integration issues across IAM and AI ecosystemsCollaborate closely with architects, IAM engineers, security teams, platform teams, and product stakeholdersRequirementsBachelor's or Master's degree in Computer Science, Software Engineering, Information Security, or related field7+ years of software engineering experience in enterprise environmentsProficiency in Python, C#, Java, or similar technologiesKnowledge of SailPoint IdentityIQBackground in developing REST APIs and microservicesExpertise in Azure cloud services, Kubernetes, and containerized applicationsSkills in Microsoft Entra ID authentication and authorization modelsUnderstanding of OAuth2, OIDC, JWT, and API securityCompetency in CI/CD pipelines and DevOps practicesCapability to integrate enterprise platforms through APIsStrong engineering, problem-solving, collaboration, and communication skillsAbility to work independently and drive technical solutionsPassion for innovation, modern AI-enabled platforms, continuous learning, and a quality-driven, customer-focused approachExcellent command of written and spoken English (B2+ level)Nice to haveKnowledge of ServiceNowFamiliarity with IAM, IGA, or security-related solutionsKnowledge of identity governance conceptsWe offerWe gather like-minded people:Top tech minds driving innovation in AI, cloud and digital platform modernizationSupportive team and agile, startup-like cultureHybrid by design mode and opportunity to work remotely within PolandChance to work abroad for up to 60 days annuallyBusiness-driven relocation opportunitiesWe provide growth opportunities:Career development programsThought leadership, mentoring, soft skills and well-being programsCertification (Anthropic, Gemini, GCP, Azure, AWS)English classesWe cover it all:Stable payParticipation in the Employee Stock Purchase Plan with a 15% discountBenefits package (health insurance, multisport, shopping vouchers)Referral bonuses up to $2,000Offices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and moreCorporate, social and well-being eventsPlease, note:Benefits listed above are available to employees onlyWe are open for working with Contractors. Terms of B2B cooperation agreements are agreed individuallyWe will reach out to selected candidates exclusivelyEPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.