IAM Security Operations Engineer - SSO, RBAC & Automation

SOFTSWISS; United States; Remote; USD 110,000 - 150,000; Full time

Benefits offered by this job

Private health insurance

Sports benefits

Mental Health Program

Free English lessons (online)

Local language courses

Paid time off

Maternity leave support

Referral program rewards

Upskilling, internal workshops, and ph

Participation in conferences and corp.

Job summary

SOFTSWISS is seeking an IAM Security Operations Engineer to maintain and troubleshoot IAM services, manage identity lifecycle processes (JML), and ensure secure, role-based access across our systems.

You will handle complex JML scenarios, perform technical troubleshooting of IAM services (SSO, IdP, provisioning flows) including Keycloak, and configure Adaxes automation rules to enforce RBAC and least privilege.

Qualifications

• 2+ years in IAM, identity operations, or security engineering roles.
• Experience maintaining and troubleshooting IAM-related services (Keycloak, Adaxes, GWS).
• Experience maintaining secure IAM integrations using APIs and federation protocols (SAML 2.0, OAuth 2.0, OpenID Connect).
• Hands-on experience with RBAC configuration and provisioning workflows.
• Solid understanding of IAM architecture concepts.
• Working knowledge of SSO, MFA, provisioning, and directory services.
• Understanding of identity-related security risks.
• Strong troubleshooting and log analysis skills.
• Understanding of identity protocols (SAML, OAuth, OIDC – operational level).
• Ability to communicate clearly with business users.
• Ability to work independently on technical incidents.
• Scripting or automation capability (e.g., Python, PowerShell, Bash).
• Intermediate or higher English (B1+) and strong command of Russian

Responsibilities

• Handle complex and non-standard Joiner/Mover/Leaver (JML) scenarios.
• Perform technical troubleshooting of IAM services (SSO, IdP, provisioning flows), including Keycloak.
• Configure and maintain Adaxes automation tool: automation rules, approval-based workflows, role-based permissions, etc
• Implement changes in IAM services and integrations (Keycloak, Adaxes, etc).
• Process JML access requests in alignment with approved RBAC models.
• Automate repetitive access management tasks.
• Validate access requests against least privilege and segregation of duties principles.
• Write technical and user documentation, including models (e.g., UML).
• Monitor IAM platform health and proactively identify risks.
• Assist users with access and system requests in alignment with Security standards and procedures

Skills

JML

SSO

IdP

Keycloak

Adaxes

RBAC

least privilege

scripting

log analysis

communication with users

Tools

Keycloak

Adaxes

GWS

Job description

SOFTSWISS is seeking an IAM Security Operations Engineer to maintain and troubleshoot IAM services, manage identity lifecycle processes (JML), and ensure secure, role-based access across our systems.

You will handle complex JML scenarios, perform technical troubleshooting of IAM services (SSO, IdP, provisioning flows) including Keycloak, and configure Adaxes automation rules to enforce RBAC and least privilege.