{"id":3563363,"url":"https://alion.io/job/epam-systems-iam-architect","title":"IAM Architect","company":{"id":92,"name":"EPAM Systems","domain":"epam.com","url":"https://alion.io/company/epam-systems","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"HeadHunter","truth_index":{"grade":"D","score":51,"open_postings":68,"ghost_share":0.765,"stale_share":0,"repost_share":0.176,"time_to_fill_p50_days":42,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Vilnius, Lithuania"],"countries":["LT"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":5600,"max":7200,"currency":"EUR","period":"month","gross":true,"usd_annual":96540},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"IAM","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"PowerShell","optional":false},{"name":"Prompt Engineering","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Terraform","optional":false},{"name":"Active Directory","optional":true},{"name":"Auth0","optional":true},{"name":"AutoGen","optional":true},{"name":"AWS Bedrock","optional":true},{"name":"Copilot Studio","optional":true},{"name":"CyberArk","optional":true},{"name":"Function Calling","optional":true},{"name":"LangChain","optional":true},{"name":"LLM","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"Okta","optional":true},{"name":"OpenAI","optional":true},{"name":"Ping Identity","optional":true},{"name":"Power Automate","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-10-31T02:39:13Z","employer_posted_date":null,"last_verified_at":"2026-10-31T02:39:13Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Job Description\nWe are seeking an experienced IAM Architect to design, implement and continuously improve identity and access management solutions that protect enterprise systems while enabling secure, efficient access across the organization. The ideal candidate combines deep IAM expertise with a forward-thinking approach to automation and AI-assisted security operations.\n\n_This position offers hybrid setup with the flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas._\n\nPlan, design and implement security architectures and controls for Identity and Access Management systems\n\nGather business, functional and non-functional requirements, including compliance and regulatory requirements, to design IAM solutions for new implementations, migrations and security posture improvements\n\nDesign and improve core IAM capabilities, including user lifecycle management, provisioning/deprovisioning, SSO, federation, MFA/passwordless authentication, privileged access, access reviews and role-based access models\n\nImplement and maintain IAM integrations with cloud platforms, SaaS applications, enterprise systems, directories, databases and APIs\n\nCollaborate with engineering, infrastructure, development, database, security operations, compliance and architecture teams on physical and logical system design\n\nSupport development and improvement of corporate identity security standards, access control models and IAM governance processes\n\nDesign and implement IAM-related monitoring, resilience, backup and disaster recovery strategies\n\nDevelop and maintain automation scripts, workflows and IAM tooling using PowerShell, Python, REST APIs, SCIM or Terraform\n\nUse AI-powered tools and agentic workflows to automate and improve daily IAM activities, such as access request classification and routing, entitlement analysis, access review support, policy and role model analysis, user lifecycle and provisioning workflow optimization, privileged access review support, compliance evidence collection and IAM documentation and runbook automation\n\nDesign or integrate AI agents and AI-assisted automations for IAM processes where appropriate, while ensuring proper security, privacy, auditability and human-in-the-loop controls\n\nReport IAM risks, project status and remediation plans to security leadership and relevant stakeholders\n\nRequirements\n\nBachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience\n\n3+ years of security experience within the Identity and Access Management domain, with at least one successfully delivered IAM implementation, migration or modernization project\n\nHands-on experience with at least one enterprise IAM, IGA, PAM or federation platform\n\nUnderstanding of IAM concepts, including identity lifecycle, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege and privileged access\n\nKnowledge of common IAM protocols and standards, such as SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP and Kerberos\n\nExperience configuring IAM security controls, policies and access governance processes\n\nUnderstanding of cloud IAM concepts across at least one major cloud platform such as Azure, AWS or GCP\n\nExperience working with security service-oriented projects and enterprise security programs\n\nAbility to work closely with developers, architects, infrastructure engineers, security operations, compliance teams and business stakeholders\n\nFamiliarity with AI-assisted productivity and automation beyond basic chatbot usage, including building or configuring AI agents, using AI to automate repetitive IAM or security tasks, integrating LLMs with tools, APIs, documents or workflows, prompt engineering and structured prompting, creating AI-assisted runbooks, scripts, queries or documentation, and using AI tools securely with awareness of sensitive identity data, access control and audit requirements\n\nGood communication skills and ability to explain IAM risks, technical decisions and remediation plans to both technical and non-technical stakeholders\n\nHands-on proficiency is a must\n\nNice to have\n\nExperience with IAM platforms such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, ForgeRock, Auth0, SailPoint, Saviynt or CyberArk\n\nExperience with CIAM, B2B/B2C identity, customer identity, external identity or partner access scenarios\n\nBackground in SIEM/SOAR integrations for IAM monitoring, alerting and automated response\n\nFamiliarity with AI/LLM platforms or frameworks such as Azure OpenAI, Amazon Bedrock, Microsoft Copilot Studio, LangChain, AutoGen or Power Automate\n\nUnderstanding of AI security risks, including data leakage, prompt injection, excessive agency, insecure tool use, model governance and sensitive identity data exposure\n\nSecurity, IAM or AI-related certifications such as SC-300, Okta Certified Professional/Administrator/Consultant, SailPoint, Saviynt, CyberArk or Ping Identity certifications, CISSP, CISM, CISA, CCSK, CCSP, SSCP, AI-900 or AWS Certified AI Practitioner\n\nCompany offers\n\nEngineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years\n\nAdvanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies\n\nWorld-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact\n\nProfessional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices\n\nGenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys\n\nEntrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life\n\nHybrid Setup: The flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas\n\nOther Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more","description_format":"text","description_chars":6189,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-31T06:52:35Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":42,"reasons":["seen:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":{"stated_usd_annual":96540,"is_top_pay":false},"html_url":"https://alion.io/job/epam-systems-iam-architect","json_url":"https://alion.io/job/epam-systems-iam-architect.json","meta":{"generated_at":"2026-11-02T10:33:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14613,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":92},"rest":"https://alion.io/mcp/rest/get_company?id=92"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fepam-systems-iam-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fepam-systems-iam-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fepam-systems-iam-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/epam-systems-iam-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fepam-systems-iam-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3563363}},{"tool":"search_jobs","arguments":{"company":"epam.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3563363},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}