IAM Security Operations Engineer – Middle
SOFTSWISS Warsaw, Masovian Voivodeship, Poland
Software Development · 1,001-5,000 employees
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
The IAM Security Operations Engineer will maintain and troubleshoot IAM services while managing identity lifecycle processes and role-based access. They will also automate repetitive tasks and ensure compliance with security standards and least privilege principles.
What they look for
Requirements
Candidates must have at least 2 years of experience in IAM or security engineering roles with hands-on knowledge of Keycloak and Adaxes. Proficiency in identity protocols like SAML, OAuth, and OIDC, along with scripting skills in Python or PowerShell, is required.
Benefits
Full description
Overview:
SOFTSWISS is looking for an IAM Security Operations Engineer to maintain and troubleshoot IAM services, manage identity lifecycle processes (JML), and ensure secure, role-based access across our systems.
Key responsibilities:
- Handle complex and non-standard JML scenarios
- Perform technical troubleshooting of IAM services (SSO, IdP, provisioning flows), including Keycloak
- Configure and maintain Adaxes automation tool: automation rules, approval-based workflows, role-based permissions, etc
- Implement changes in IAM services and integrations (Keycloak, Adaxes,etc)
- Process Joiner/Mover/Leaver (JML) access requests in alignment with approved RBAC models
- Automate repetitive access management tasks
- Validate access requests against least privilege and segregation of duties principles
- Write technical and user documentation, including models (e.g., UML)
- Monitor IAM platform health and proactively identify risks
- Assist users with access and system requests in alignment with Security standards and procedures
Required Experience:
- 2+ years in IAM, identity operations, or security engineering roles
- Experience in maintaining and troubleshooting IAM - related services (Keycloak, Adaxes, GWS)
- Experience maintaining secure IAM integrations using APIs and federation protocols (SAML 2.0, OAuth 2.0, OpenID Connect)
- Hands-on experience with RBAC configuration and provisioning workflows
- Solid understanding of IAM architecture concepts
- Working knowledge of SSO, MFA, provisioning, and directory services
- Understanding of identity-related security risks
- Strong troubleshooting and log analysis skills
- Understanding of identity protocols (SAML, OAuth, OIDC – operational level)
- Ability to communicate clearly with business users
- Ability to work independently on technical incidents
- Scripting or automation capability (e.g., Python, PowerShell, Bash)
- Intermediate or higher English (B1+) and strong command of Russian
Our Benefits:
- Private health insurance
- Sports benefits
- Comprehensive Mental Health Program
- Free English lessons (online)
- Local language courses
- Paid time off
- Maternity leave support
- Referral program rewards
- Upskilling, internal workshops, and participation in professional conferences and corporate events
