IAM Security Architect with AI

EPAM Systems; Turkey; On-site; TRY 6,021,000 - 9,032,000; Full time

Benefits offered by this job

Upskilling program

Mentoring programs

Certification support

Learning platforms

English courses

Extra leave days

Referral bonuses

Health insurance

Well-being events

Recreation areas

Job summary

EPAM Systems Inc in Turkey seeks an experienced IAM Security Architect with foundational AI skills to design and implement identity security across enterprise, cloud and hybrid environments.

You will shape IAM architectures, strengthen access governance, evaluate technologies and collaborate with cross-functional teams to embed IAM security into enterprise solutions, while enabling automation and AI-assisted workflows.

Qualifications

• Bachelor's degree or equivalent practical experience in CS/Cybersecurity/Engineering.
• 5+ years in information security with a focus on IAM or identity security architecture.
• Hands-on with at least one enterprise IAM, IGA, PAM or identity federation platform.
• Strong understanding of identity lifecycle, SSO, federation and least privilege.
• Knowledge of SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos.
• Proficiency with IAM technologies and cloud IAM concepts across major platforms.
• Familiarity with Zero Trust, NIST, ISO 27001 and IAM automation/scripting.
• Intermediate experience with AI-assisted tools for access analysis and automation.
• Excellent communication and cross-functional collaboration skills.

Responsibilities

• Design security architectures and controls for IAM across enterprise, cloud and hybrid environments.
• Gather requirements to design IAM solutions for new implementations, migrations and improvements.
• Define IAM capabilities including lifecycle management, provisioning, SSO, MFA and access governance.
• Shape authentication, authorization and access control models (RBAC/ABAC/Zero Trust).
• Conduct IAM reviews, risk assessments and design evaluations.
• Develop IAM reference architectures, standards and governance guidelines.
• Evaluate IAM technologies including IGA, PAM and cloud-native services.
• Support IAM integrations with cloud platforms, SaaS and on-premise systems.
• Collaborate with cross-functional teams to embed IAM in enterprise solutions.
• Enable IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform or similar.
• Leverage AI-assisted workflows to improve access reviews, entitlements and provisioning.
• Identify AI automation opportunities with validation, data protection and oversight.
• Communicate risks and remediation plans to stakeholders and leadership.

Skills

IAM architecture

AI integration

RBAC/ABAC

Zero Trust

Identity governance

SAML/OAuth/OpenID Connect

PowerShell/Python

REST APIs/SCIM

Cloud IAM concepts

Education

Bachelor's degree in Computer Science/C Cybersecurity/Engineering

Tools

Microsoft Entra ID

Active Directory

Okta

Ping Identity

SailPoint

Saviynt

CyberArk

Job description

We are seeking an experienced IAM Security Architect with foundational AI skills to design and implement robust Identity and Access Management solutions across enterprise, cloud, and hybrid environments. In this role, you will shape IAM architectures, strengthen access governance, and leverage AI-assisted tools to optimize identity security workflows while collaborating with cross-functional teams to embed IAM security into enterprise solutions.ResponsibilitiesDesign and implement security architectures and controls for Identity and Access Management (IAM) systems across enterprise, cloud and hybrid environmentsGather business, technical and compliance requirements to design IAM solutions for new implementations, migrations and security improvementsDefine and improve IAM capabilities, including identity lifecycle management, provisioning/deprovisioning, SSO, federation, MFA, privileged access management and access governanceShape authentication, authorization and access control models, including RBAC, ABAC, least privilege and Zero Trust principlesConduct IAM security architecture reviews, risk assessments and access control design evaluationsDevelop IAM reference architectures, security standards, access control policies and identity governance guidelinesEvaluate IAM technologies and solutions, including identity providers, IGA, PAM, federation platforms and cloud-native identity servicesSupport IAM integrations with cloud platforms, SaaS applications, enterprise systems, directories and APIsCollaborate with cloud, infrastructure, development, security operations, compliance and enterprise architecture teams to integrate IAM security into enterprise solutionsEnable IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform or similar technologiesLeverage AI-assisted tools and workflows to improve IAM activities, including identity and access risk analysis, access reviews and entitlement analysis, role and access policy analysis, provisioning workflow optimization, compliance reporting and evidence collection, as well as security scripting, documentation and repetitive task automationIdentify opportunities for AI-assisted IAM automation while ensuring appropriate validation, data protection, auditability and human oversightCommunicate IAM security risks, architectural decisions and remediation plans to stakeholders and security leadershipRequirementsBachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience5+ years of information security experience, with a focus on IAM, identity security architecture or IAM engineeringBackground in delivering or significantly contributing to IAM implementation, migration, integration or modernization projectsHands-on expertise with at least one enterprise IAM, IGA, PAM or identity federation platformStrong understanding of IAM principles, including identity lifecycle management, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege and privileged accessPractical experience with IAM architecture design, identity security controls, access policies or identity governance processesKnowledge of common IAM protocols and standards such as SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP or KerberosProficiency in IAM technologies such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt or CyberArkUnderstanding of cloud IAM concepts and identity security controls across at least one major cloud platform such as Azure, AWS or GCPWorking knowledge of related security domains, including cloud security, network security, application security, data protection and security operations, without requiring deep specialization in eachFamiliarity with security architecture principles and frameworks such as Zero Trust, NIST or ISO 27001, as well as IAM automation, scripting, APIs and identity integration workflowsIntermediate practical experience with AI-assisted tools and automation, including using AI tools for access analysis, security research and IAM troubleshooting, applying structured prompting for technical and security tasks, generating and validating scripts, queries, access policies and documentation with AI, simplifying repetitive IAM and security workflows, and basic experience configuring AI-assisted workflows or integrationsUnderstanding of safe AI usage, including sensitive identity data protection, access control, auditability and validation of AI-generated outputs, with willingness to further develop AI automation skillsStrong communication, collaboration and hands-on technical skillsNice to haveExperience with IAM platforms such as ForgeRock, Auth0 or similar, including Identity Governance and Administration (IGA), Privileged Access Management (PAM), CIAM or B2B/B2C identity scenariosFamiliarity with cloud identity, workload identities, service principals, managed identities and hybrid identity architecturesBackground in integrating IAM solutions with SIEM/SOAR, security monitoring and automated response workflowsExperience with AI automation, AI agents, Microsoft Copilot Studio, Azure OpenAI, Amazon Bedrock, Claude, LangChain or Power Automate, along with an understanding of AI security risks such as sensitive data exposure, prompt injection, excessive permissions and insecure AI tool usageSecurity or IAM certifications such as CISSP, CISM, CISA, CCSP, CCSK, Microsoft SC-300, Microsoft SC-100, Okta Certified Professional/Administrator/Consultant, or SailPoint, Saviynt, CyberArk or Ping Identity certifications; AI-related certifications such as Claude Certified Architect, AI-900: Microsoft Azure AI Fundamentals or AWS Certified AI Practitioner are a plusWe offerCONTINUOUS UPSKILLING, LEARNING & DEVELOPMENTDiversity of tasks and projectsAssessment center for objective review of competency levelPersonal development planMentoring programs and leadership developmentCertification and professional development supportAccess to learning platforms including more than 2,500 internal coursesEnglish courses taught by certified teachersCORPORATE BENEFITSExtra leave daysReferral bonusesCOMPENSATION PACKAGECompetitive compensation paid in USDRegular salary and performance reviewsMEDICAL & HEALTHCAREPrivate health insuranceWell-being eventsWORKING ENVIRONMENTRecreation areas and kitchensTea, coffee and snacksSports equipment and game consolesIT EquipmentMicrosoft’s Software Assurance Home Use Program (HUP)Please note that our Talent Attraction Team reviews applications and CVs submitted in English.EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.