IAM Solution Architect
We are looking for an experienced IAM Solution Architect to join a large-scale international Identity & Access Management transformation programme.
The role focuses on designing modern, scalable and secure IAM solutions covering human, machine and workload identities, with a strong focus on Zero Trust, GCP and Kubernetes.
Location & Contract
- Hybrid: 6 days per month from the client’s office in Kraków
- B2B contract via Antal
Responsibilities
- Design end-to-end IAM architectures and create HLDs/LLDs
- Define authentication, authorization and federation solutions
- Design solutions for Human, Machine, Workload and Agent Identity
- Design cloud-native solutions using GCP and Kubernetes
- Define API security and service-to-service / workload authentication patterns
- Drive Zero Trust architecture and security patterns
- Define IAM integrations, reference architectures and technical standards
- Support engineering teams throughout implementation and production readiness
- Participate in architecture governance, design reviews and roadmap planning
- Collaborate with architects, security, engineering and business stakeholders
Requirements
- Strong experience in Enterprise Solution Architecture
- Extensive experience with Identity & Access Management
- Strong understanding of Authentication & Authorization
- Hands-on knowledge of OAuth2 / OIDC
- Experience with Workload / Machine Identity
- Good understanding of Zero Trust Architecture
- Experience with GCP and Kubernetes
- Experience in API Architecture / API Security
- Knowledge of DevSecOps and CI/CD
- Experience designing scalable, resilient and highly available systems
- Strong communication and stakeholder management skills
Nice to Have
- SAML / SCIM
- Agent Identity
- Service Mesh
- Policy-as-Code (OPA / Cedar)
- Event-driven architecture
- PKI, certificate and secrets management
- IAM transformation programmes in large enterprises
- Banking / financial services / regulated environments
What’s in it for you?
- Long-term international IAM transformation programme
- Real influence on target architecture and technology standards
- Modern technology stack: IAM, Zero Trust, GCP, Kubernetes and Workload Identity
- Large-scale enterprise environment
- Collaboration with experienced architecture, security and engineering teams