Platform Engineer (IAM Identity, Gov & Admin)

Mondelez International Inc.; Warszawa; On-site; PLN 260,000 - 360,000; Full time

Job summary

Mondelez International is seeking an experienced information security and compliance specialist in Warsaw, Poland. The role focuses on assessing information security risks, supporting security of IT assets, and implementing SailPoint IdentityIQ solutions to manage access governance across environments.

You will work under the global information security lead, manage third-party providers for security adherence, and provide training to relevant teams while ensuring compliance with SOX, GDPR,

Qualifications

• 10+ years in Identity & Access Management
• Hands-on IGA platform engineering experience
• Security governance and risk management expertise
• SailPoint IdentityIQ certifications preferred

Responsibilities

• Assess information security risks in line with policy and best practices
• Support security of information and IT assets by testing security systems and applying security standards
• Implement SailPoint IdentityIQ solutions and manage platform health across environments
• Lead role mining, role engineering and entitlement rationalisation
• Govern privileged access through PAM, SoD and Just-In-Time provisioning
• Maintain alignment of IGA processes to SOX, GDPR, HIPAA, PCI-DSS and ISO 27001
• Build integrations (ServiceNow/Jira, SIEM/SOAR, multi-cloud IAM)
• Provide information security training to teams

Skills

Identity and Access Management

Information security

Risk management

Governance

Cybersecurity strategy

Communication with technical teams

Education

Bachelor’s degree in Computer Science or Information Security

Tools

SailPoint IdentityIQ

ServiceNow/Jira

SIEM/SOAR

LDAP/AD Azure AD

REST/JSON/XML

Job description

• You work with the information security team as a competent and experienced information security and compliance specialist
• You will assess information security risks in line with internal policy and external best practices, and support security of information and IT assets by testing security systems and applying security standards, policies, and procedures
• Under the guidance of global information security lead, you will implement cyber security technology and provide day-to-day business support. If relevant to your role, you will manage third-party providers to ensure that any internal or third-party adhere to standards. You will also provide information security training to appropriate teams
• Designing, developing and deploying SailPoint IdentityIQ solutions - workflows, rules, custom connectors (JDBC, SCIM, REST, LDAP) and RBAC/ABAC/PBAC access models
• Acting as the primary operational SME for the IIQ platform across all environments: platform health, aggregation and provisioning issues, root cause analysis, upgrades and change control under ITIL/ITSM
• Running access certification campaigns - manager, entitlement owner, micro-certification and SoD reviews - using risk-based strategies and AI-driven recommendations
• Enhancing automated Joiner, Mover and Leaver workflows, from birthright provisioning through to timely de-provisioning and orphan account cleanup
• Leading role mining, role engineering and entitlement rationalisation to keep the access model clean and access requests simple
• Governing privileged access through PAM integration, SoD enforcement and Just-In-Time provisioning
• Keeping IGA processes aligned to SOX, GDPR, HIPAA, PCI-DSS, NIST 800-53 and ISO 27001, with audit-ready reporting and evidence
• Building integrations that scale - ServiceNow/Jira for access request fulfilment, SIEM/SOAR for ITDR, and multi-cloud IAM (AWS, Azure, GCP)
• Partnering with application owners, HR, IT Security and the business to drive adoption, and presenting the KPIs that show platform maturity

10+ years in Identity & Access Management, including 7+ years hands-on IGA platform engineeringInformation security, compliance and risk managementSecurity strategies, awareness campaigns, policies/standards and governanceExpert-level SailPoint IdentityIQ - workflows, rules, connectors, lifecycle events, certifications and role modellingStrong Java and BeanShell scripting, with SQL, XML, JSON, REST APIs and web servicesA desire to drive your future and accelerate your careerCommunicating effectively with technical specialists, leaders and peersSailPoint certifications, CISSP, CISM or CISA (preferred)A Bachelor’s degree in Computer Science, Information Security or a related field, or equivalent experienceAnalytical and problem-solving abilitiesBeing a team player by supporting and leading to achieve common goalsSecurity solutions and their applicability to Mondelēz InternationalSCIM, SAML 2.0, OAuth 2.0, OpenID Connect and CI/CD pipelines (Git, Jenkins, Ansible)LDAP / Active Directory, Azure AD / Entra ID and enterprise directory servicesNIST CSF 2.0, NIST 800-53, ISO 27001/27002, Zero Trust Architecture and COBIT 2019