Zero-Trust IAM & Cloud Security Engineer

ALTEN Polska; Kraków; On-site; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Work equipment provided

Conference & training opportunities

Opportunities to relocate within ALTEN

Great Place to Work certification

Job summary

ALTEN Polska is seeking an Information Security Engineer to design and enforce security controls across the IDAM 2.0 platform in Kraków. You will embed Secure by Design, implement Zero Trust, and configures authentication/authorisation mechanisms with mutual TLS for service communications.

You will also handle secrets management, PKI, threat modelling and vulnerability remediation, while contributing to DevSecOps and policy-as-code initiatives.

Qualifications

• Experience in designing and implementing security controls in IAM and zero-trust environments.
• Familiarity with GCP security controls and Kubernetes is preferred.
• The role requires practical knowledge of PKI, secrets management and certificates.

Responsibilities

• Design and implement security controls across the IDAM 2.0 platform.
• Embed Secure by Design principles throughout solution delivery.
• Implement and maintain Zero Trust security controls.
• Configure and maintain authentication and authorisation security mechanisms.
• Implement secure service-to-service communication using mutual TLS (mTLS).
• Support Workload Identity, Human Identity and Agent Identity security controls.
• Implement and maintain Policy-as-Code solutions using OPA and related technologies.
• Integrate secrets management, PKI and certificate lifecycle services.
• Support cryptographic key management and certificate rotation processes.
• Perform security reviews of solution designs, infrastructure and application code.
• Conduct threat modelling and security risk assessments.
• Identify, assess and remediate security vulnerabilities.
• Support vulnerability management and security patching activities.
• Develop and maintain security baselines, standards and hardening guides.
• Implement cloud security controls for GCP resources and Kubernetes platforms.
• Configure security monitoring, logging, alerting and audit capabilities.
• Support identity governance, privileged access and least privilege implementation.
• Assist with penetration testing and remediation activities.
• Support security compliance with financial services regulatory requirements.
• Collaborate with Security Operations and Incident Response teams during security events.
• Support security assurance for third-party integrations and supplier solutions.
• Contribute to DevSecOps tooling and automated security testing.
• Promote security awareness and engineering best practice across delivery teams.
• Produce security documentation, implementation guides and operational Procedures.

Skills

Information Security Engineering

Identity and Access Management

Zero Trust Architecture

Authentication and Authorisation

PKI and Certificate Management

Secrets Management

Cloud Security (GCP)

Service Mesh Security

API Security

Policy-as-Code (OPA)

DevSecOps

SSDLC

Vulnerability Management

Security Monitoring and SIEM

Governance & Compliance

Job description

ALTEN Polska is seeking an Information Security Engineer to design and enforce security controls across the IDAM 2.0 platform in Kraków. You will embed Secure by Design, implement Zero Trust, and configures authentication/authorisation mechanisms with mutual TLS for service communications.

You will also handle secrets management, PKI, threat modelling and vulnerability remediation, while contributing to DevSecOps and policy-as-code initiatives.