E2S Architect (IAM & Cloud Security)

TL;DR

E2S Architect (IAM & Cloud Security): Designing secure identity, access, and cloud architectures for hybrid and multicloud environments with an accent on modern authentication standards, workload identity, and Zero Trust controls. Focus on implementing relationship-based access control, automating security policies with infrastructure as code, and aligning enterprise integrations with regulatory requirements.

Location: Hybrid work in Lisbon, Portugal, with offices at Expo and Colombo.

Company

hirify.global is a global business and technology transformation partner delivering engineering, cloud, cybersecurity, and AI-powered solutions across more than 50 countries.

What you will do

• Design IAM and security architectures using OIDC, OAuth2, Token Exchange, SAML, and Zero Trust principles.
• Architect and operate IAM systems across hybrid and multicloud environments, including AWS, Azure, and GCP workload identity.
• Implement relationship-based access control with OpenFGA, Authzed, or Zanzibar-inspired models.
• Develop Terraform and/or Crossplane modules with policy-as-code controls using OPA, Conftest, and Rego.
• Create end-to-end authentication and authorization blueprints using API Gateways and federated identity.
• Lead architectural reviews and advise engineering, cybersecurity, and product teams on governance and adoption.

Requirements

• 8+ years of experience in IAM and/or cybersecurity.
• Deep knowledge of OIDC, OAuth2 with Token Exchange, and SAML.
• Strong proficiency with Keycloak and/or Ory.
• Hands-on experience with at least two hyperscalers: AWS, Azure, or GCP.
• Experience with cloud-native workload identity, ReBAC implementation, Terraform and/or Crossplane, and API Gateway integration architecture.
• Understanding of SecNumCloud, NIS2, GDPR, and Zero Trust frameworks.

Nice to have

• Cloud certification from AWS, Azure, or GCP.
• Security certification such as CISSP, CCSP, or Security+.

Culture & Benefits

• Multicultural, inclusive, and supportive working environment.
• Hybrid work model and work-life balance support.
• Career growth programs, training, and access to technology certifications.
• National and international project opportunities.
• Health and life insurance.
• Referral program with bonuses and modern office locations.