Senior IAM Architect - Cloud & Zero Trust

ITDS; Kraków; Hybrid; PLN 320,000 - 520,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

ITDS is seeking an Expert IAM Architect in Kraków on a hybrid schedule to drive enterprise identity capabilities across authentication, federation, and security architectures. You will shape cloud-native IAM designs for GCP and Kubernetes, implement Zero Trust patterns, and lead governance through Architecture Review Boards while mentoring engineering teams.

Ideal candidates have 8+ years in security or enterprise architecture, deep IAM expertise, and practical experience with OIDC/OAuth2/SAML,

Qualifications

• 8+ years in enterprise or security architecture
• Strong IAM expertise including authentication, authorisation, and federation
• Experience with OIDC, OAuth2, SAML, SCIM
• Practical Zero Trust, Agent Identity, Workload Identity knowledge
• GCP, Kubernetes, service mesh, API architecture, and API security experience
• Event-driven architecture, messaging, asynchronous processing, and Policy-as-Code (OPA/Cedar)
• Knowledge of PKI, certificates, secrets management, DevSecOps, and CI/CD
• Stakeholder management and architecture governance experience

Responsibilities

• Produce high/low level designs for enterprise identity capabilities
• Define end-to-end technical solutions across business, application, data, and infrastructure domains
• Design cloud-native IAM solutions for GCP and Kubernetes environments
• Develop authentication, authorisation, federation, API security, and service-to-service authentication architectures
• Define Zero Trust, secrets management, PKI integration patterns
• Design event-driven integrations, resilience, DR, and high availability
• Lead architecture governance through reviews and ARBs, and promote best practices
• Support engineering teams during implementation, testing, and production readiness while mentoring engineers

Skills

IAM expertise

Cloud security

GCP

Kubernetes

OIDC/OAuth2/SAML

Zero Trust

Policy as Code (OPA/Cedar)

Tools

OAuth2/OIDC tooling

Kubernetes APIs

Job description

ITDS is seeking an Expert IAM Architect in Kraków on a hybrid schedule to drive enterprise identity capabilities across authentication, federation, and security architectures. You will shape cloud-native IAM designs for GCP and Kubernetes, implement Zero Trust patterns, and lead governance through Architecture Review Boards while mentoring engineering teams.

Ideal candidates have 8+ years in security or enterprise architecture, deep IAM expertise, and practical experience with OIDC/OAuth2/SAML,