IAM security engineer

SOFTSWISS; United States; Remoto; USD 120.000 - 180.000; Tempo pieno

Vantaggi offerti da questo lavoro

Private health insurance

Sports benefits

Mental health program

Free online English lessons

Local language courses

Paid time off

Maternity leave support

Referral program rewards

Upskilling and workshops

Descrizione del lavoro

SOFTSWISS ищет специалиста по IAM для проектирования и внедрения федерации идентификации, а также автоматизации процессов управления доступом в крупных системах. Вы будете работать над настройками SAML, OAuth и OpenID Connect, а также интеграциями через REST‑API.

В обязанности входит устранение IAM‑инцидентов и создание документации. Кандидат должен обладать опытом администрирования Keycloak, адаптацией JML‑процессов и сильными навыками скриптинга (PowerShell, Python, Bash).

Competenze

• Совершенное владение федерацией идентификации и протоколами аутентификации и авторизации (SAML 2.0, OAuth 2.0, OpenID Connect).
• Опыт администрирования Keycloak: управление realm, конфигурация клиентов, сопоставление ролей, identity brokering, собственные потоки аутентификации.
• Умение проектировать JML‑процессы с использованием Adaxes или аналогов.
• Глубокое понимание RBAC/ABAC и паттернов интеграции API.
• Навыки автоматизации и скриптинга (PowerShell, Python, Bash).
• Опыт работы в enterprise‑окружениях, решение IAM‑инцидентов.

Mansioni

• Проектирование и внедрение IAM‑интеграций через SCIM, SAML, OAuth и OIDC.
• Автоматизация процессов lifecycle управления доступом.
• Мроектирование RBAC/ABAC в корпоративной экосистеме.
• Устранение сложных IAM‑инцидентов и мониторинг.
• Интеграция IAM‑сервисов в CI/CD и IaC.
• Поддержка расследований по идентификации и аудитам.
• Разработка и поддержка документации по IAM.
• Определение безопасных конфигураций IAM‑платформ.

Conoscenze

Identity federation

SAML 2.0

OAuth 2.0

OIDC

RBAC/ABAC

Keycloak

Adaxes

Joiner/Mover/Leaver

API integrations

REST APIs

Token-based auth

CI/CD IAM integration

Automation scripting

PowerShell

Python

Bash

Formazione

Бакалавр или магистр в компьютерных науках/Information Security

Strumenti

Keycloak

Adaxes

Descrizione del lavoro

Описание

Описания нет

Задачи

• Architect and implement IAM integrations using SCIM, SAML, OAuth, OIDC, and APIs
• Lead automation of access lifecycle management processes
• Design and implement RBAC/ABAC models across enterprise systems
• Troubleshoot and resolve complex IAM-related incidents
• Integrate IAM services into CI/CD and Infrastructure-as-Code workflows
• Provide technical expertise during identity-related investigations
• Define secure configuration standards for IAM platforms
• Develop and maintain technical documentation

Требования

• Advanced practical expertise in identity federation and authentication and authorization protocols, including SAML 2.0, OAuth 2.0, and OpenID Connect
• Hands‑on experience administering and configuring Keycloak, including realm management, client configuration, role mapping, identity brokering, and custom authentication flows
• Ability to design, build, and optimize Joiner/Mover/Leaver (JML) workflows using Adaxes or an equivalent, including automation rules, business logic, and approval flows
• Strong understanding of RBAC/ABAC implementation patterns
• Experience designing and implementing secure API integrations, including REST APIs, token-based authentication, and service-to-service communication
• Advanced IAM troubleshooting and debugging capabilities
• Strong automation and scripting skills, including PowerShell, Python, or Bash
• Ability to translate security requirements into scalable IAM solutions
• Strong knowledge of IAM architecture patterns and federation models
• In‑depth understanding of authentication flows, token lifecycle management, and access control enforcement mechanisms
• Knowledge of identity lifecycle orchestration patterns and directory service integrations, such as Active Directory
• Familiarity with PAM integration and privileged access governance concepts
• At least 3 years of experience in IAM or security engineering roles in enterprise environments
• Experience improving access lifecycle efficiency through automation and process redesign
• Experience troubleshooting complex IAM, SSO, and federation incidents
• Experience supporting identity‑related security investigations and audit activities
• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field
• Будет плюсом: Advanced security certifications such as CISSP, CIAM, or vendor IAM certifications

Условия

• Private health insurance
• Sports benefits
• Comprehensive Mental Health Program
• Free online English lessons
• Local language courses
• Paid time off
• Maternity leave support
• Referral program rewards
• Upskilling, internal workshops, and participation in professional conferences and corporate events