IAM Security Engineer – Senior

IAM Security Engineer – Senior

hot vacancy

October 13, 2026

Full time

WorldWide

Overview:

SOFTSWISS continues to expand the team and is looking for an experienced IAM Security Engineer to join us. We are seeking a hands-on professional with strong expertise in identity and access management, IAM integrations, and access lifecycle automation, who shares our culture and values.

Purpose of the role:

You will be responsible for designing, implementing, and maintaining secure and scalable identity and access management solutions, integrating IAM services across enterprise systems, and automating access lifecycle processes to ensure efficient and secure access management.

Key responsibilities:

Architect and implement IAM-related integrations using SCIM, SAML, OAuth, OIDC, and APIs.

Lead automation of access lifecycle management processes.

Design and implement RBAC/ABAC models across enterprise systems.

Troubleshoot and resolve complex IAM-related incidents

Integrate IAM services into CI/CD and Infrastructure-as-Code workflows.

Provide technical expertise during identity-related investigations.

Define secure configuration standards for IAM platforms.

Develop and maintain high-quality technical documentation.

Required Experience:

Skills

Advanced practical expertise in identity federation and modern authentication/authorization protocols (SAML 2.0, OAuth 2.0, OpenID Connect).

Deep hands-on experience with Keycloak administration and configuration, including realm management, client configuration, role mapping, identity brokering, and custom authentication flows.

Proven ability to design, build, and optimize Joiner/Mover/Leaver (JML) workflows using Adaxes or analog, including automation rules, business logic, and approval flows.

Strong understanding of RBAC/ABAC implementation patterns.

Experience designing and implementing secure API integrations (REST APIs, token-based authentication, service-to-service communication).

Advanced troubleshooting and debugging capabilities across IAM ecosystems.

Strong automation and scripting skills (e.g., PowerShell, Python, Bash)

Ability to translate security requirements into scalable IAM solutions.

Knowledge

Strong knowledge of IAM architecture patterns and federation models.

In-depth understanding of authentication flows, token lifecycle management, and access control enforcement mechanisms.

Knowledge of identity lifecycle orchestration patterns and directory service integrations (e.g., Active Directory).

Familiarity with PAM integration and privileged access governance concepts.

Experience

3+ of experience in IAM or security engineering roles within enterprise environments.

Proven hands-on experience administering and engineering solutions on the Keycloak platform, including realm design, client configuration, identity brokering, custom authentication flows, role mapping, and token management.

Experience designing and implementing secure IAM integrations using APIs and federation protocols (SAML 2.0, OAuth 2.0, OpenID Connect).

Hands-on experience building and optimizing automated Joiner/Mover/Leaver (JML) workflows using Adaxes, including approval logic and lifecycle orchestration.

Demonstrated experience improving access lifecycle efficiency through automation and process redesign.

Experience troubleshooting complex IAM, SSO, and federation-related incidents.

Experience supporting identity-related security investigations and audit activities.

Education and Qualification

Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.

Advanced security certifications preferred (e.g., CISSP, CIAM, vendor IAM certifications).

Main Advantages

Private health insurance

Sports benefits

Comprehensive Mental Health Program

Free English lessons (online)

Local language courses

Paid time off

Maternity leave support

Referral program rewards

Upskilling, internal workshops, and participation in professional conferences and corporate events

SOFTSWISS recruitment communication is conducted only through official company channels. We never ask candidates to make payments, purchase equipment, share financial details, or transfer money as part of the hiring process. If you receive a suspicious message using the SOFTSWISS name, please verify it via [email protected]

Apply for position

Your Email *

Your Name *

Your Last Name *

Resume/CV *

Requirements: PDF, DOC, up to 5Mb

Link to profile, such as LinkedIn

Copy & paste your cover letter, CV link or message

By filling out this form, you agree that your data will be processed by SOFTSWISS for recruitment purposes. You can withdraw your consent to the processing at any time. For more information, please read our Privacy Policy *

Apply now

Employer working-location policy Source: https://careers.softswiss.com/ SOFTSWISS’ employees are not limited to any specific workplace and are free to work from any location on the planet – in one of our five offices, or from home.

Work location The career page and current careers index list this role as worldwide. The employer states that employees can work from any location on the planet. The page also names Poland in its structured applicant-country metadata, which conflicts with its displayed worldwide location. The complete application has no country or work-authorisation question.

Application requirements Source: https://careers.softswiss.com/vacancies/iam-security-engineer-senior/ The application requires an email address, given name, surname, a CV and privacy consent. Upload instructions say PDF/DOC up to 5 MB; the file picker also accepts DOCX. A profile link and message are optional. The visible form has no country, work-authorisation, sponsorship or office-choice question. The employer’s structured posting states 40 hours per week; exact daily hours and timezone are not stated. Base pay is not stated. Hiring process Source: https://careers.softswiss.com/blog/hiring-guide-softswiss/ The employer describes CV review, a recruiter call and core interviews. The number and structure vary by role. A test task may be required, sometimes before the main interview; test compensation is not stated. A further team meeting may occur.