AI-Augmented IAM Security Engineer

EPAM Systems; Turkey; On-site; TRY 4,480,000 - 6,471,000; Full time

Benefits offered by this job

Extra leave days

Referral bonuses

Private health insurance

Well-being events

Recreation areas

Job summary

EPAM Systems is seeking an AI-Augmented IAM Security Engineer to implement and operate enterprise IAM, across cloud and on-premises environments. You will build automation, configure SSO, MFA and passwordless access, and manage roles, SoD, and privileged access controls.

You will integrate AI agents and LLM-backed automations into IAM workflows, while ensuring security, auditability and runbook-driven recovery. Strong scripting and cross-functional collaboration are essential.

Qualifications

• 2+ years of hands-on IAM implementation or operation.
• Experience with at least one of Azure, AWS or Google Cloud IAM.
• Knowledge of SSO, MFA, RBAC/ABAC and least-privilege access.
• Experience with IAM protocols like SAML, OAuth 2.0 and OpenID Connect.
• Ability to script and automate IAM tasks using PowerShell or Python.

Responsibilities

• Implement, configure and operate IAM solutions and controls.
• Maintain identity lifecycle processes across target systems.
• Configure core IAM capabilities including SSO, MFA and passwordless auth.
• Develop IAM integrations with cloud platforms, SaaS apps, directories and databases.
• Operate Privileged Access Management controls and vaulting.
• Develop AI-assisted automations to reduce manual IAM tasks and enable auditing.

Skills

Identity and Access Management

SAML

OAuth 2.0

OpenID Connect

SCIM

PowerShell

Python

REST APIs

Terraform

Azure/AWS/GCPS

Education

Bachelor's degree in Computer Science

Bachelor's degree in Cybersecurity

Engineering degree

Tools

Microsoft Entra ID

Active Directory

Okta

Ping Identity

ForgeRock

Auth0

SailPoint

Saviynt

CyberArk

Job description

We are seeking an AI-Augmented IAM Security Engineer to handle the hands-on implementation, configuration, automation and day-to-day operation of enterprise Identity and Access Management. This is a delivery-and-operations role that works within the designs, standards, role models and policies set by IAM architects and security leadership. The focus is building, configuring, scripting, running and troubleshooting IAM, not defining target-state architecture, role models or governance policy.ResponsibilitiesImplement, configure and operate IAM solutions and controls based on architecture, standards and designs defined by IAM architects and security leadershipMaintain identity lifecycle (Joiner / Mover / Leaver) processes, including automated provisioning and deprovisioning across target systemsConfigure core IAM capabilities, including SSO, federation, MFA and passwordless authentication, conditional access, RBAC/ABAC role models and least-privilege accessDevelop and deploy IAM integrations and connectors with cloud platforms, SaaS applications, enterprise systems, directories, authoritative source systems, databases and APIsExecute access certification and review campaigns, perform entitlement clean-up and configure segregation-of-duties (SoD) rules according to access policies defined by architects and the businessOperate Privileged Access Management controls, including credential vaulting, secrets rotation, session management and just-in-time and just-enough accessDevelop automation scripts, workflows and IAM tooling using PowerShell, Python, REST APIs, SCIM, Terraform or similar technologiesMonitor IAM platform health, troubleshoot and resolve incidents and access issues, and perform patching, upgrades and configuration hardeningMaintain IAM logging, alerting and monitoring, and run backup and recovery procedures according to defined runbooks and resilience requirementsDeploy AI-assisted automations and agentic workflows that reduce manual effort across daily IAM operations, such as access request triage, entitlement analysis, anomaly detection, root-cause analysis, privileged access review support, compliance evidence collection and documentation generationIntegrate AI agents and LLM-backed automations into IAM systems and operational pipelines, connecting models to internal tools, APIs, directories, ticketing and IAM platforms via function calling, SCIM, REST and webhooksDevelop and maintain reusable prompts, structured-prompting patterns and prompt templates, and implement retrieval over IAM policies, role catalogs, runbooks and documentation (for example RAG) so AI assistants answer from current authoritative internal sourcesImplement output verification, human-in-the-loop approval gates and rollback paths in AI-assisted IAM workflows, so no AI-driven change reaches production access without reviewImplement security and privacy controls for IAM AI usage, including least-privilege access for agents, secrets and credential handling, prompt-injection resistance, redaction of sensitive identity data and full auditability of AI-driven actionsMonitor AI-assisted IAM automations in production, measure their accuracy and impact, continuously tune prompts, tools and workflows, and produce operational documentation, runbooks and standard operating procedures while supporting audits and compliance evidence requestsRequirementsBachelor's degree in Computer Science, Cybersecurity, Engineering or equivalent practical experience2+ years of hands-on experience implementing or operating Identity and Access Management solutionsExperience with at least one enterprise IAM, IGA, PAM or federation platformUnderstanding of IAM concepts, including identity lifecycle, authentication and authorization, SSO, federation, MFA, RBAC/ABAC, least privilege and privileged accessKnowledge of common IAM protocols and standards such as SAML, OAuth 2.0 and OpenID Connect, alongside SCIM, LDAP and KerberosExperience configuring IAM controls, policies, connectors and access governance workflowsWorking knowledge of cloud IAM concepts across at least one major cloud platform such as Azure, AWS or GCPScripting and automation experience using at least one of PowerShell, Python, Bash, REST APIs, SCIM or TerraformCapability to work closely with developers, architects, infrastructure engineers, security operations, compliance teams and business stakeholdersCompetency to follow, maintain and improve defined IAM and security processes, executing changes from tickets, runbooks and designs while escalating design-level questionsPractical understanding of AI-assisted productivity and automation beyond basic chatbot usage, including building AI agents, automating repetitive IAM tasks, integrating LLMs with tools and documents, prompt engineering and using AI tools securely with awareness of sensitive identity dataGood communication skills and the ability to explain IAM issues, technical decisions and remediation steps to both technical and non-technical stakeholdersNice to haveFamiliarity with IAM platforms such as Microsoft Entra ID, Active Directory and Okta, alongside Ping Identity, ForgeRock, Auth0, SailPoint, Saviynt or CyberArkExperience with CIAM, B2B/B2C identity, customer identity, external identity or partner access scenarios, plus SIEM/SOAR integrations for IAM monitoring, alerting and automated responseExperience with CI/CD-based IAM deployment, configuration-as-code and automated testing of IAM changesFamiliarity with AI/LLM platforms or frameworks such as Azure OpenAI, Amazon Bedrock and Microsoft Copilot Studio, alongside LangChain, AutoGen or Power AutomateUnderstanding of AI security risks, including data leakage, prompt injection, excessive agency, insecure tool use, model governance and sensitive identity data exposureSC-300, Okta Certified Professional / Administrator / Consultant, SailPoint, Saviynt, CyberArk or Ping Identity certifications, CISSP, CISM, CISA, CCSK, CCSP, SSCP, AI-900 or AWS Certified AI PractitionerWe offerCONTINUOUS UPSKILLING, LEARNING & DEVELOPMENTDiversity of tasks and projectsAssessment center for objective review of competency levelPersonal development planMentoring programs and leadership developmentCertification and professional development supportAccess to learning platforms including more than 2,500 internal coursesEnglish courses taught by certified teachersCORPORATE BENEFITSExtra leave daysReferral bonusesCOMPENSATION PACKAGECompetitive compensation paid in USDRegular salary and performance reviewsMEDICAL & HEALTHCAREPrivate health insuranceWell-being eventsWORKING ENVIRONMENTRecreation areas and kitchensTea, coffee and snacksSports equipment and game consolesIT EquipmentMicrosoft’s Software Assurance Home Use Program (HUP)Please note that our Talent Attraction Team reviews applications and CVs submitted in English.EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.