Software Engineer

ALTEN Polska; Kraków; Hybrid; PLN 180,000 - 320,000; Full time

Benefits offered by this job

Work equipment provided

Conference participation

Certification and training

Relocation opportunities

Great Place To Work

Group life insurance

Pension scheme

Newborn layette

Job summary

ALTEN Polska is seeking an IAM-focused engineer to design identity flows, integrate with cloud services, and build secure APIs for provisioning and governance. You will implement policy-based workflows and event-driven architectures, leveraging Terraform and Kubernetes tooling.

You will work across identity, API, and infrastructure teams to ensure secure, scalable IAM solutions with modern authentication patterns and reliable operations.

Qualifications

• Experience with modern identity orchestration platforms (Auth0 Actions, Okta Workflows, WorkOS, or SlashID).
• Strong programming skills in Python, Go, or Node.js for API/microservice development.
• Experience designing and deploying cloud-native APIs (Cloud Run, Cloud Functions, GKE).
• Deep understanding of event-driven architectures, Pub/Sub, message processing, and workflow automation.
• Strong knowledge of OAuth2, OIDC, JWT, SAML, and identity federation patterns.
• Proficiency with Terraform or equivalent IaC tools.

Responsibilities

• Design and implement identity flows for provisioning, de-provisioning and lifecycle events.
• Integrate with Cloud Identity Services, ServiceNow, and internal services to orchestrate identity provisioning and lifecycle management.
• Build policy-based orchestration workflows for adaptive authentication and context-aware access (OPA).
• Design, build, and secure RESTful APIs and backend services for identity and governance workflows.
• Integrate APIs with authentication service for token validation and authorization.
• Develop pipelines for API events publishing to Pub/Sub and build Cloud Functions/Run services to process messages.

Skills

Identity orchestration platforms

Python/Go/Node.js

OAuth2/OIDC/JWT/SAML

Cloud-native APIs

Terraform

Pub/Sub/event-driven

Tools

Terraform

Cloud Run

Cloud Functions

GKE

Kubernetes RBAC

Service mesh

Job description

Why us?

We are part of the ALTEN Group – a leading European provider of engineering and technology consulting servics.

Join ALTEN Polska and let’s grow together!

Location: Kraków/ Warsaw- hybird work (6 x month)

Role Descriptions/ Tasks:

1. Identity Orchestration

• Design and implement identity flows for provisioning, de-provisioning and orchestration of identity lifecycle events.
• Integrate with Cloud Identity Services, ServiceNow, and internal services to streamline / orchestrate identity provisioning and identity lifecycle management.
• Build policy-based orchestration workflows for adaptive authentication and context-aware access using industry standards (like OPA).

2. API Development

• Design, build, and secure RESTful APIs and backend services supporting identity, provisioning, and governance workflows.
• Integrate APIs with our new authentication service for token validation, user sessions, and application-level authorization.
• Build and document internal SDKs, middleware, and shared libraries for consistent IAM logic across services.
• Ensure API security, performance, reliability, resilience, and observability.

3. API-to-Pub/Sub Event Processing

• Develop pipelines where API events publish to Pub/Sub for asynchronous workflows such as:
  • automated identity lifecycle tasks
  • access review event triggers
  • logging and audit forwarding
  • security anomaly detection
• Build Cloud Functions, Cloud Run microservices, or containerized services to process Pub/Sub messages.
• Implement robust event-processing patterns including retries, idempotency, DLQs, and structured logging.

4. Automation & Infrastructure as Code

• Build and maintain Terraform modules for IAM, API services, Pub/Subtopics, workloads, and permissions.
• Automate deployment and validation of identity and access configurations via CI/CD pipelines.
• Implement automated testing for IAM policies and API behaviour.

5. Support, Troubleshooting & Collaboration

• Troubleshoot identity, access, and API workflow issues across distributed systems.
• Provide technical guidance to engineering teams on secure API design, IAM best practices, and identity workflows.
• Work with security teams during audits, compliance checks, and incident investigations.

Key Skills and Qualifications:

• Proven experience with modern identity orchestration platforms (Auth0 Actions, Okta Workflows, WorkOS, or SlashID)
• Strong programming skills in Python, Go, or Node.js for API and microservice development.
• Experience designing and deploying cloud-native APIs (Cloud Run, Cloud Functions, GKE).
• Deep understanding of event-driven architectures, Pub/Sub, message processing, and workflow automation.
• Strong knowledge of OAuth2, OIDC, JWT, SAML, and identity federation patterns.
• Proficiency in Terraform or equivalent IaC tools.
• Experience using API gateways, reverse proxies, or service mesh technologies.

Nice-to-Have

• Full Stack App Development (React)
• Google Professional Cloud Security Engineer or Cloud Architect certification.
• Experience with additional identity providers (Okta, Azure AD, Ping Identity).
• Familiarity with Kubernetes (GKE RBAC + workload identity).
• Experience using Secret Manager, Vault, or other secrets management tools.
• Knowledge of compliance frameworks (SOC2, ISO 27001, PCI, HIPAA).

We offer

• A full-time contract (B2B also possible)
• All necessary work equipment is provided by us (computer, monitor etc).
• Participation in company many conferences, trainings, workshops, integration meetings, etc.
• Certification and training opportunities
• Opportunity to relocate and work in different ALTEN Polska branches
• After completion of the project, opportunity to engage in a subsequent one within the company.
• Work in company with #GreatPlaceToWork Certificate

Benefits

• Access to professional certifications with our technology partners (e.g. Google, ISTQB)
• Access to relevant industry events
• Access to the Knowledge Sharing Program
• Access to Referral program
• Work Equipment
• Layette for a newborn employee’s child
• Group life insurance
• Pension scheme

Do not hesitate and join our team!