IAM Architect

Job Description

We are seeking an experienced IAM Architect to design, implement and continuously improve identity and access management solutions that protect enterprise systems while enabling secure, efficient access across the organization. The ideal candidate combines deep IAM expertise with a forward-thinking approach to automation and AI-assisted security operations.

_This position offers hybrid setup with the flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas._

• Plan, design and implement security architectures and controls for Identity and Access Management systems
• Gather business, functional and non-functional requirements, including compliance and regulatory requirements, to design IAM solutions for new implementations, migrations and security posture improvements
• Design and improve core IAM capabilities, including user lifecycle management, provisioning/deprovisioning, SSO, federation, MFA/passwordless authentication, privileged access, access reviews and role-based access models
• Implement and maintain IAM integrations with cloud platforms, SaaS applications, enterprise systems, directories, databases and APIs
• Collaborate with engineering, infrastructure, development, database, security operations, compliance and architecture teams on physical and logical system design
• Support development and improvement of corporate identity security standards, access control models and IAM governance processes
• Design and implement IAM-related monitoring, resilience, backup and disaster recovery strategies
• Develop and maintain automation scripts, workflows and IAM tooling using PowerShell, Python, REST APIs, SCIM or Terraform
• Use AI-powered tools and agentic workflows to automate and improve daily IAM activities, such as access request classification and routing, entitlement analysis, access review support, policy and role model analysis, user lifecycle and provisioning workflow optimization, privileged access review support, compliance evidence collection and IAM documentation and runbook automation
• Design or integrate AI agents and AI-assisted automations for IAM processes where appropriate, while ensuring proper security, privacy, auditability and human-in-the-loop controls
• Report IAM risks, project status and remediation plans to security leadership and relevant stakeholders

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience
• 3+ years of security experience within the Identity and Access Management domain, with at least one successfully delivered IAM implementation, migration or modernization project
• Hands-on experience with at least one enterprise IAM, IGA, PAM or federation platform
• Understanding of IAM concepts, including identity lifecycle, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege and privileged access
• Knowledge of common IAM protocols and standards, such as SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP and Kerberos
• Experience configuring IAM security controls, policies and access governance processes
• Understanding of cloud IAM concepts across at least one major cloud platform such as Azure, AWS or GCP
• Experience working with security service-oriented projects and enterprise security programs
• Ability to work closely with developers, architects, infrastructure engineers, security operations, compliance teams and business stakeholders
• Familiarity with AI-assisted productivity and automation beyond basic chatbot usage, including building or configuring AI agents, using AI to automate repetitive IAM or security tasks, integrating LLMs with tools, APIs, documents or workflows, prompt engineering and structured prompting, creating AI-assisted runbooks, scripts, queries or documentation, and using AI tools securely with awareness of sensitive identity data, access control and audit requirements
• Good communication skills and ability to explain IAM risks, technical decisions and remediation plans to both technical and non-technical stakeholders
• Hands-on proficiency is a must

Nice to have

• Experience with IAM platforms such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, ForgeRock, Auth0, SailPoint, Saviynt or CyberArk
• Experience with CIAM, B2B/B2C identity, customer identity, external identity or partner access scenarios
• Background in SIEM/SOAR integrations for IAM monitoring, alerting and automated response
• Familiarity with AI/LLM platforms or frameworks such as Azure OpenAI, Amazon Bedrock, Microsoft Copilot Studio, LangChain, AutoGen or Power Automate
• Understanding of AI security risks, including data leakage, prompt injection, excessive agency, insecure tool use, model governance and sensitive identity data exposure
• Security, IAM or AI-related certifications such as SC-300, Okta Certified Professional/Administrator/Consultant, SailPoint, Saviynt, CyberArk or Ping Identity certifications, CISSP, CISM, CISA, CCSK, CCSP, SSCP, AI-900 or AWS Certified AI Practitioner

Company offers

• Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years
• Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies
• World-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact
• Professional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices
• GenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys
• Entrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life
• Hybrid Setup: The flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas
• Other Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more