IAM Solution Architect

We are looking for an experienced IAM Solution Architect to join a large-scale international Identity & Access Management transformation programme.

The role focuses on designing modern, scalable and secure IAM solutions covering human, machine and workload identities, with a strong focus on Zero Trust, GCP and Kubernetes.

Location & Contract

• Hybrid: 6 days per month from the client’s office in Kraków
• B2B contract via Antal

Responsibilities

• Design end-to-end IAM architectures and create HLDs/LLDs
• Define authentication, authorization and federation solutions
• Design solutions for Human, Machine, Workload and Agent Identity
• Design cloud-native solutions using GCP and Kubernetes
• Define API security and service-to-service / workload authentication patterns
• Drive Zero Trust architecture and security patterns
• Define IAM integrations, reference architectures and technical standards
• Support engineering teams throughout implementation and production readiness
• Participate in architecture governance, design reviews and roadmap planning
• Collaborate with architects, security, engineering and business stakeholders

Requirements

• Strong experience in Enterprise Solution Architecture
• Extensive experience with Identity & Access Management
• Strong understanding of Authentication & Authorization
• Hands-on knowledge of OAuth2 / OIDC
• Experience with Workload / Machine Identity
• Good understanding of Zero Trust Architecture
• Experience with GCP and Kubernetes
• Experience in API Architecture / API Security
• Knowledge of DevSecOps and CI/CD
• Experience designing scalable, resilient and highly available systems
• Strong communication and stakeholder management skills

Nice to Have

• SAML / SCIM
• Agent Identity
• Service Mesh
• Policy-as-Code (OPA / Cedar)
• Event-driven architecture
• PKI, certificate and secrets management
• IAM transformation programmes in large enterprises
• Banking / financial services / regulated environments

What’s in it for you?

• Long-term international IAM transformation programme
• Real influence on target architecture and technology standards
• Modern technology stack: IAM, Zero Trust, GCP, Kubernetes and Workload Identity
• Large-scale enterprise environment
• Collaboration with experienced architecture, security and engineering teams