IAM Engineer (SaaS/iGaming)

Location: Remote, with the role listed in Prague, Czechia

Company

SaaS and iGaming platform with a Security team focused on identity and access management.

What you will do

• Design, implement, and maintain IAM solutions across the organization.
• Integrate and support IdP systems such as Okta, Keycloak, and SailPoint.
• Develop and enforce RBAC, ABAC, and PBAC models aligned with business processes.
• Automate provisioning, deprovisioning, onboarding, and offboarding workflows.
• Implement authentication and authorization flows using SAML, OAuth2, OIDC, LDAP, Kerberos, and SCIM.
• Collaborate with engineering, DevOps, and security teams; monitor access issues, support audits, and document IAM standards.

Requirements

• Experience with access management processes in large organizations and deployment of IdP solutions.
• Strong knowledge of RBAC, ABAC, PBAC, and IDM integrations.
• Experience with provisioning automation, user lifecycle management, Git, and CI/CD pipelines.
• Understanding of cloud IAM services, including AWS or GCP.
• Ability to build automation scripts and tools with Python or Go.
• Native Russian language required for communication within the Russian-speaking team.

Nice to have

• Experience integrating LLMs through APIs or MCP.
• Infrastructure as Code skills with Terraform or Ansible.
• Experience with MDM solutions, ELK stack, incident investigation, or CTF challenges.

Culture & Benefits

• 25 vacation days and 5 family days per year.
• Flexible start to the workday.
• Support from a corporate coach and psychologist.
• Internal and external activities, workshops, trips, and corporate events.
• Access to a knowledge base, meetups, team-building activities, and ongoing technology training.