IAM Solution Architect
We are looking for an experienced IAM Solution Architect to join a large-scale international Identity & Access Management transformation programme.
The role focuses on designing modern, scalable and secure IAM solutions covering human, machine and workload identities, with a strong focus on Zero Trust, GCP and Kubernetes.
Location & Contract
-
Hybrid: 6 days per month from the client’s office in Kraków
-
B2B contract via Antal
-
Rate: up to 180–190 PLN net/h
Responsibilities
-
Design end-to-end IAM architectures and create HLDs/LLDs
-
Define authentication, authorization and federation solutions
-
Design solutions for Human, Machine, Workload and Agent Identity
-
Design cloud-native solutions using GCP and Kubernetes
-
Define API security and service-to-service / workload authentication patterns
-
Drive Zero Trust architecture and security patterns
-
Define IAM integrations, reference architectures and technical standards
-
Support engineering teams throughout implementation and production readiness
-
Participate in architecture governance, design reviews and roadmap planning
-
Collaborate with architects, security, engineering and business stakeholders
Requirements
-
Strong experience in Enterprise Solution Architecture
-
Extensive experience with Identity & Access Management
-
Strong understanding of Authentication & Authorization
-
Hands-on knowledge of OAuth2 / OIDC
-
Experience with Workload / Machine Identity
-
Good understanding of Zero Trust Architecture
-
Experience with GCP and Kubernetes
-
Experience in API Architecture / API Security
-
Knowledge of DevSecOps and CI/CD
-
Experience designing scalable, resilient and highly available systems
-
Strong communication and stakeholder management skills
Nice to Have
-
SAML / SCIM
-
Agent Identity
-
Service Mesh
-
Policy-as-Code (OPA / Cedar)
-
Event-driven architecture
-
PKI, certificate and secrets management
-
IAM transformation programmes in large enterprises
-
Banking / financial services / regulated environments
What’s in it for you?
-
Long-term international IAM transformation programme
-
Real influence on target architecture and technology standards
-
Modern technology stack: IAM, Zero Trust, GCP, Kubernetes and Workload Identity
-
Large-scale enterprise environment
-
Collaboration with experienced architecture, security and engineering teams