Senior IAM Architect – Identity & Access Security (Hybrid)

ABB; Kraków; Hybrid; PLN 450,000 - 750,000; Full time

Benefits offered by this job

Hybrid work model

Career growth opportunities

Job summary

ABB Kraków is seeking a Principal Domain Architect for Identity and Access Security to lead global IAM strategy and architecture. You will guide Solution Architects, standardize across environments, and drive advanced identity controls in a hybrid on-site setup.

The role emphasizes Zero Trust, strong authentication, RBAC/ABAC/PBAC models, and cross-functional collaboration with security, IS, and HR teams. 15+ years of security architecture experience is expected.

Qualifications

• Proven expertise in enterprise security architecture and roadmapping.
• 15+ years in security architecture with Identity Security focus.
• Cloud security knowledge across public cloud providers.
• Experience with ISO 27002 and NIST 800-53.

Responsibilities

• Define and maintain the global IAM architecture vision and roadmap.
• Establish standards and reference architectures for identity lifecycle and access governance.
• Architect IAM capability landscape including IGA, PAM, AM, CIAM and secret management.
• Drive Zero Trust Identity principles and strong authentication across environments.
• Lead design for RBAC, ABAC, PBAC models and least-privilege access.
• Integrate IAM with cloud, on-premises, and hybrid platforms and ensure policy enforcement.
• Design secure IAM integration with applications including SSO and just-in-time provisioning.
• Architect IAM observability with monitoring, analytics, and automated responses.
• Partner with HR and security teams to embed IAM controls in joiner/mover/leaver processes.
• Embed resilience through high availability, DR, and continuity planning.
• Guide incident response and lessons learned to preventive IAM controls.
• Rationalize IAM tools to reduce complexity and cost.
• Stay ahead of IAM threats like MFA bypass and credential stuffing.
• Mentor globally distributed IAM architects and engineers.

Skills

Security architecture

Zero Trust

Cloud security

Roadmapping

Archimate

UML

Architectural leadership

Security governance

Education

Bachelor’s degree in Computer Science or related field

CISSP

SABSA

TOGAF

Tools

ArchiMate

UML

Job description

ABB Kraków is seeking a Principal Domain Architect for Identity and Access Security to lead global IAM strategy and architecture. You will guide Solution Architects, standardize across environments, and drive advanced identity controls in a hybrid on-site setup.

The role emphasizes Zero Trust, strong authentication, RBAC/ABAC/PBAC models, and cross-functional collaboration with security, IS, and HR teams. 15+ years of security architecture experience is expected.