Skip To Main Content
epam-logo-black.svgepam-logo-black.svg
backBack to Search

IAM Architect

Hybrid in Republic of Lithuania, Latvia
Security.IAM
Looking for something else?

Find a vacancy that works for you. Send us your CV to receive a personalized offer.

Find me a job
Choose an option

We are seeking an experienced IAM Architect to design, implement and continuously improve identity and access management solutions that protect enterprise systems while enabling secure, efficient access across the organization. The ideal candidate combines deep IAM expertise with a forward-thinking approach to automation and AI-assisted security operations.

Responsibilities
  • Plan, design and implement security architectures and controls for Identity and Access Management systems
  • Gather business, functional and non-functional requirements, including compliance and regulatory requirements, to design IAM solutions for new implementations, migrations and security posture improvements
  • Design and improve core IAM capabilities, including user lifecycle management, provisioning/deprovisioning, SSO, federation, MFA/passwordless authentication, privileged access, access reviews and role-based access models
  • Implement and maintain IAM integrations with cloud platforms, SaaS applications, enterprise systems, directories, databases and APIs
  • Collaborate with engineering, infrastructure, development, database, security operations, compliance and architecture teams on physical and logical system design
  • Support development and improvement of corporate identity security standards, access control models and IAM governance processes
  • Design and implement IAM-related monitoring, resilience, backup and disaster recovery strategies
  • Develop and maintain automation scripts, workflows and IAM tooling using PowerShell, Python, REST APIs, SCIM or Terraform
  • Use AI-powered tools and agentic workflows to automate and improve daily IAM activities, such as access request classification and routing, entitlement analysis, access review support, policy and role model analysis, user lifecycle and provisioning workflow optimization, privileged access review support, compliance evidence collection and IAM documentation and runbook automation
  • Design or integrate AI agents and AI-assisted automations for IAM processes where appropriate, while ensuring proper security, privacy, auditability and human-in-the-loop controls
  • Report IAM risks, project status and remediation plans to security leadership and relevant stakeholders
Requirements
  • Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience
  • 3+ years of security experience within the Identity and Access Management domain, with at least one successfully delivered IAM implementation, migration or modernization project
  • Hands-on experience with at least one enterprise IAM, IGA, PAM or federation platform
  • Understanding of IAM concepts, including identity lifecycle, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege and privileged access
  • Knowledge of common IAM protocols and standards, such as SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP and Kerberos
  • Experience configuring IAM security controls, policies and access governance processes
  • Understanding of cloud IAM concepts across at least one major cloud platform such as Azure, AWS or GCP
  • Experience working with security service-oriented projects and enterprise security programs
  • Ability to work closely with developers, architects, infrastructure engineers, security operations, compliance teams and business stakeholders
  • Familiarity with AI-assisted productivity and automation beyond basic chatbot usage, including building or configuring AI agents, using AI to automate repetitive IAM or security tasks, integrating LLMs with tools, APIs, documents or workflows, prompt engineering and structured prompting, creating AI-assisted runbooks, scripts, queries or documentation, and using AI tools securely with awareness of sensitive identity data, access control and audit requirements
  • Good communication skills and ability to explain IAM risks, technical decisions and remediation plans to both technical and non-technical stakeholders
  • Hands-on proficiency is a must
Nice to have
  • Experience with IAM platforms such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, ForgeRock, Auth0, SailPoint, Saviynt or CyberArk
  • Experience with CIAM, B2B/B2C identity, customer identity, external identity or partner access scenarios
  • Background in SIEM/SOAR integrations for IAM monitoring, alerting and automated response
  • Familiarity with AI/LLM platforms or frameworks such as Azure OpenAI, Amazon Bedrock, Microsoft Copilot Studio, LangChain, AutoGen or Power Automate
  • Understanding of AI security risks, including data leakage, prompt injection, excessive agency, insecure tool use, model governance and sensitive identity data exposure
  • Security, IAM or AI-related certifications such as SC-300, Okta Certified Professional/Administrator/Consultant, SailPoint, Saviynt, CyberArk or Ping Identity certifications, CISSP, CISM, CISA, CCSK, CCSP, SSCP, AI-900 or AWS Certified AI Practitioner