Senior Identity & Access Management Application Developer

Talanto; Kraków; Hybrid; PLN 309,000 - 375,000; Full time

Job summary

Talanto seeks a Senior Identity & Access Management Application Developer to build a cutting-edge IAM platform for a leading financial institution. You will design scalable identity workflows, secure RESTful APIs, and event-driven pipelines in a cloud-native environment, collaborating across technical teams.

Required: 5+ years in identity or API eng, strong Python/Go/Node.js skills, and deep knowledge of OAuth2/OIDC/JWT/SAML.

Qualifications

• At least 5 years of experience in identity platform development, API engineering, or cloud-native app design.
• Strong knowledge of OAuth2, OIDC, JWT, SAML and federation patterns.
• Experience with cloud-native platforms (Cloud Run/Functions, GKE).
• Hands-on with RESTful APIs, microservices, and event-driven architectures.

Responsibilities

• Design and implement scalable identity workflows for provisioning, de-provisioning, and lifecycle events.
• Develop and secure RESTful APIs and microservices; integrate with Cloud Identity Services and internal systems.
• Build policy-driven workflows for context-aware authentication (OPA).
• Create and maintain event-driven pipelines using Pub/Sub and serverless/containerized services.
• Develop Terraform modules for IAM, APIs, workloads, and permissions; automate CI/CD deployments.
• Troubleshoot complex identity and API workflow issues across distributed systems.
• Provide guidance on secure API design, IAM best practices, and workflows.

Skills

Python

Go

Node.js

OAuth2

OIDC

JWT

SAML

Cloud Run

Cloud Functions

GKE

Terraform

Kubernetes RBAC

Vault/Secret Manager

Education

Bachelor's degree in Computer Science/Engineering or related field

Tools

Terraform

Kubernetes

ServiceNow

Job description

Senior Identity & Access Management Application Developer

27,720 – 33,600 PLN

Important: if an employer asks you to log into their system via iCloud or Google, send a code, an SMS or Telegram password, run some code, or install software — refuse. These are signs of fraud.

Unleash innovation in identity and access – shape secure, scalable digital ecosystems!
Krakow-based opportunity with hybrid work model.

As a Senior Identity & Access Management Application Developer, you will be working for our client, a leading financial institution committed to redefining global identity and access management (IAM). You will help build a cutting-edge IAM transformation platform, integrating modern IDAM technology with enterprise-scale systems, ensuring secure, adaptive, and seamless identity workflows across cloud environments. Join us and contribute to a transformative journey at the forefront of digital security and cloud-native innovation!

Your main responsibilities:

• Design and implement scalable identity workflows for provisioning, de-provisioning, and lifecycle event orchestration.
• Develop and secure RESTful APIs and microservices, integrating with Cloud Identity Services, ServiceNow, and internal systems.
• Build policy-driven workflows for context-aware authentication using industry standards such as OPA.
• Construct and maintain event-driven pipelines, leveraging Pub/Sub, Cloud Functions, Cloud Run, or containerized services, supporting asynchronous identity processes and security monitoring.
• Develop Terraform modules for IAM, API services, workloads, and permissions, automating deployment via CI/CD pipelines.
• Troubleshoot complex identity and API workflow issues across distributed systems.
• Provide guidance to engineering teams on secure API design, IAM best practices, and identity workflows.

You're ideal for this role if you have:

• At least 5 years of experience in identity platform development, API engineering, or cloud-native application design.
• Proven expertise with identity APIs, data transformation, and event-driven architecture, especially Pub/Sub, message processing, and workflow automation.
• Strong programming skills in Python, Go, or Node.js.
• Deep understanding of OAuth2, OIDC, JWT, SAML, and federation patterns.
• Hands-on experience with cloud services such as Cloud Run, Cloud Functions, or GKE.
• Proficiency with Terraform or similar Infrastructure-as-Code tools.
• Knowledge of API gateway, service mesh, and reverse proxy technologies.
• Analytical mindset with excellent debugging, root-cause analysis, and collaboration skills across technical teams.
• Bachelor's degree in Computer Science, Engineering, Information Security, or equivalent practical experience.

It is a strong plus if you have:

• Certifications such as Google Professional Cloud Security Engineer or Cloud Architect.
• Experience with additional identity providers (Okta, Azure AD, Ping Identity).
• Familiarity with Kubernetes RBAC and workload identity.
• Knowledge of secrets management tools like Vault or Secret Manager.
• Understanding of compliance standards (SOC2, ISO 27001, PCI, HIPAA).

Language Required for the role:

• Fluent English (spoken and written).

Eligibility to work in Europe:

• Only candidates with an existing legal right to work in the European Union will be considered for this role.