Security Architect (IAM)

TL;DR

Security Architect (IAM): Developing and governing the group-wide Identity and Access Management strategy and target architecture with an accent on complex multi-entity environments and Zero Trust principles. Focus on designing secure access models for human and non-human identities, including AI agents and LLM-based tools, while ensuring compliance with industry standards.

Location: Must be based in Armenia, Cyprus, Poland, or Ukraine (Remote, Hybrid, or Onsite options available).

Company

A fast-growing international business group operating in the iGaming and fintech sectors with a multicultural team of professionals.

What you will do

• Own and develop the group-wide IAM strategy, roadmap, and target architecture.
• Design and maintain integrations between JumpCloud, cloud platforms, and internal infrastructure.
• Define standards for SSO, MFA, federation, and identity lifecycle management.
• Establish secure access models for developers, DevOps, SRE, and third-party contractors.
• Govern access architecture for AWS, GCP, OpenStack, Kubernetes, and databases.
• Extend identity governance to AI agents and LLM-based tools, ensuring secure authentication and scoped permissions.

Requirements

• 5+ years of experience designing and implementing IAM solutions in complex, multi-entity environments.
• Strong knowledge of authentication protocols (SAML 2.0, OAuth 2.0, OIDC, SCIM, LDAP).
• Hands-on experience with AWS and GCP IAM, Zero Trust solutions (Cloudflare), and secrets management (HashiCorp Vault).
• Proficiency in automation tools such as Terraform, Python, or Bash.
• Understanding of IAM requirements for ISO 27001 and PCI DSS.
• English proficiency sufficient for technical documentation and communication.

Nice to have

• Experience in iGaming, fintech, or other security-sensitive environments.
• Knowledge of Open Policy Agent or other policy-as-code technologies.
• Experience with Privileged Access Management (PAM) or Identity Governance (IGA) platforms.

Culture & Benefits

• Flexible work environment: choose between remote, hybrid, or on-site work in Warsaw, Limassol, or Yerevan.
• Comprehensive benefits package including paid vacations, sick leave, and personal event days.
• Corporate healthcare program and sport benefits.
• Educational support via L&D team, internal/external trainings, and free English courses.
• Modern corporate equipment provided (macOS or Windows).
• Active internal community with team buildings, gamification, and social clubs.