IAM Security Engineer – Senior

Location: Remote from anywhere in the world or from one of the European offices.

Salary: €5,000–€7,000 gross per month.

Company

Entertainment company developing and operating enterprise-scale security and identity management capabilities.

What you will do

• Design, implement, and maintain secure and scalable identity and access management solutions.
• Architect IAM integrations using SCIM, SAML, OAuth, OpenID Connect, and APIs across enterprise systems.
• Lead automation of Joiner/Mover/Leaver access lifecycle processes and optimize lifecycle orchestration.
• Design and implement RBAC and ABAC models, secure IAM configuration standards, and CI/CD and Infrastructure-as-Code integrations.
• Troubleshoot complex IAM, SSO, and federation incidents and provide technical expertise for identity-related investigations and audits.
• Develop and maintain high-quality technical documentation.

Requirements

• 3+ years of experience in IAM or security engineering roles within enterprise environments.
• Hands-on experience administering and engineering Keycloak, including realm design, client configuration, identity brokering, custom authentication flows, role mapping, and token management.
• Experience designing and implementing secure IAM integrations using APIs and federation protocols, including SAML 2.0, OAuth 2.0, and OpenID Connect.
• Hands-on experience building and optimizing automated Joiner/Mover/Leaver workflows using Adaxes or an equivalent, including approval logic, automation rules, business logic, and lifecycle orchestration.
• Experience improving access lifecycle efficiency through automation and process redesign, troubleshooting complex IAM, SSO, and federation incidents, and supporting identity-related security investigations and audit activities.
• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.
• Advanced practical expertise in identity federation, modern authentication and authorization protocols, IAM architecture patterns, and federation models.
• Strong understanding of RBAC/ABAC implementation patterns, authentication flows, token lifecycle management, access control enforcement, identity lifecycle orchestration, and directory service integrations such as Active Directory.
• Experience designing secure REST API integrations, token-based authentication, and service-to-service communication; advanced troubleshooting and debugging capabilities across IAM ecosystems.
• Strong automation and scripting skills, including PowerShell, Python, or Bash, and the ability to translate security requirements into scalable IAM solutions.

Nice to have

• Advanced security certifications such as CISSP, CIAM, or vendor IAM certifications.
• Familiarity with PAM integration and privileged access governance concepts.

Culture & Benefits

• Remote work from anywhere in the world.
• Option to work from one of the European offices.
• Culture and values focused on secure, efficient, and scalable identity management.