Softswiss
IAM Security Engineer – Senior
Warszawa, PL • Beograd, RS • T'bilisi, GE • Poznań, PL • Kato Polemidia, CY • Il-Gżira, MT · Work style not stated · Full-time
Apply on the employer’s site ↗See how well you match this job
You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.
About the role
Description from the employer’s posting. Check the employer’s page for the current version.
- EmployerSoftswiss
- LocationWarszawa, PL • Beograd, RS • T'bilisi, GE • Poznań, PL • Kato Polemidia, CY • Il-Gżira, MT
- Work styleWork style not stated
- Employment typeFull-time
- Employer posted
Overview:
SOFTSWISS continues to expand the team and is looking for an experienced IAM Security Engineer to join us. We are seeking a hands-on professional with strong expertise in identity and access management, IAM integrations, and access lifecycle automation, who shares our culture and values.
Purpose of the role:
You will be responsible for designing, implementing, and maintaining secure and scalable identity and access management solutions, integrating IAM services across enterprise systems, and automating access lifecycle processes to ensure efficient and secure access management.
Key responsibilities:
Architect and implement IAM-related integrations using SCIM, SAML, OAuth, OIDC, and APIs.
Lead automation of access lifecycle management processes.
Design and implement RBAC/ABAC models across enterprise systems.
Troubleshoot and resolve complex IAM-related incidents
Show full description
Integrate IAM services into CI/CD and Infrastructure-as-Code workflows.
Provide technical expertise during identity-related investigations.
Define secure configuration standards for IAM platforms.
Develop and maintain high-quality technical documentation.
Required Experience:
Skills
Advanced practical expertise in identity federation and modern authentication/authorization protocols (SAML 2.0, OAuth 2.0, OpenID Connect).
Deep hands-on experience with Keycloak administration and configuration, including realm management, client configuration, role mapping, identity brokering, and custom authentication flows.
Proven ability to design, build, and optimize Joiner/Mover/Leaver (JML) workflows using Adaxes or analog, including automation rules, business logic, and approval flows.
Strong understanding of RBAC/ABAC implementation patterns.
Experience designing and implementing secure API integrations (REST APIs, token-based authentication, service-to-service communication).
Advanced troubleshooting and debugging capabilities across IAM ecosystems.
Strong automation and scripting skills (e.g., PowerShell, Python, Bash)
Ability to translate security requirements into scalable IAM solutions.
Knowledge
Strong knowledge of IAM architecture patterns and federation models.
In-depth understanding of authentication flows, token lifecycle management, and access control enforcement mechanisms.
Knowledge of identity lifecycle orchestration patterns and directory service integrations (e.g., Active Directory).
Familiarity with PAM integration and privileged access governance concepts.
Experience
3+ of experience in IAM or security engineering roles within enterprise environments.
Proven hands-on experience administering and engineering solutions on the Keycloak platform, including realm design, client configuration, identity brokering, custom authentication flows, role mapping, and token management.
Experience designing and implementing secure IAM integrations using APIs and federation protocols (SAML 2.0, OAuth 2.0, OpenID Connect).
Hands-on experience building and optimizing automated Joiner/Mover/Leaver (JML) workflows using Adaxes, including approval logic and lifecycle orchestration.
Demonstrated experience improving access lifecycle efficiency through automation and process redesign.
Experience troubleshooting complex IAM, SSO, and federation-related incidents.
Experience supporting identity-related security investigations and audit activities.
Education and Qualification
Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.
Advanced security certifications preferred (e.g., CISSP, CIAM, vendor IAM certifications).
Our Benefits:
Private health insurance
Sports benefits
Comprehensive Mental Health Program
Free English lessons (online)
Local language courses
Paid time off
Maternity leave support
Referral program rewards
Upskilling, internal workshops, and participation in professional conferences and corporate events
Check your resume against this job Free, no sign-up. Nothing you paste is stored.
Staying safe while you apply
- Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
- Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
- Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.
Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.
Preparing for this role with ROLIVA
- Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
- Prepare honestly.
Build interview stories and application drafts from your own evidence.
- Keep track.
Save the role and record your own application status and follow-ups.
At a glance
- Employment typeFull-time
- SenioritySenior
- Employer posted
- Added to ROLIVA
- Last checked
Skills in this posting
Skills ROLIVA found in the employer’s own description above. A mention is not a requirement.