{"id":2490385,"url":"https://alion.io/job/gc-iam-security-engineer","title":"IAM Security Engineer","company":{"id":61085,"name":"Georgian Card","domain":"gc.ge","url":"https://alion.io/company/gc-ge","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"HireHive","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tbilisi, Georgia"],"countries":["GE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":48000,"max_usd":116000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":629},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"BeyondTrust","optional":false},{"name":"Cloudflare","optional":false},{"name":"CyberArk","optional":false},{"name":"Delinea","optional":false},{"name":"IAM","optional":false},{"name":"Keycloak","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false}],"status":"live","first_seen_at":"2026-08-24T14:36:09Z","employer_posted_date":"2026-08-24","last_verified_at":"2026-10-14T22:28:00Z","board_verified":true,"closed_at":null,"days_open":51,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":51},"description":"JSC Georgian Card is looking for an IAM Security Engineer to join our team.\nAs the IAM Security Engineer at JSC Georgian Card, you will build, configure, and maintain the identity and access management platforms that secure the organization’s systems. You will be responsible for engineering single sign-on, multi-factor authentication, and conditional access; designing RBAC roles; and automating joiner-mover-leaver lifecycle workflows. You will also integrate applications, run identity-governance campaigns, and support privileged access management. If you are an engineering-minded, analytical, and collaborative professional who can design and implement robust identity controls, this position is for you.\nWhat you will do:\nConfigure and maintain SSO, MFA, and conditional access policies across the IAM platform;\n\nImplement and operate Zero Trust Network Access (ZTNA) for application access, replacing legacy VPN;\n\nIntegrate applications with the IAM platform via SAML, OIDC/OAuth, and SCIM provisioning;\n\nDesign and maintain RBAC roles, entitlements, and birthright access aligned to least privilege;\n\nAutomate joiner-mover-leaver lifecycle workflows and provisioning across connected systems;\n\nBuild and run identity-governance access-certification campaigns and remediate exceptions;\n\nSupport privileged access management, including credential vaulting, session management, and just-in-time access;\n\nServe as the technical escalation point for Level 1 on IAM platform issues and access logic;\n\nInvestigate access-related incidents and implement corrective controls;\n\nTranslate PCI DSS access-control requirements into enforceable IAM controls and validate them;\n\nMaintain technical documentation, including role models, integration designs, and runbooks;\n\nMentor Level 1 engineers on IAM tooling and processes.\n\nWhat you have:\nBachelor’s degree in Computer Science, Information Security, IT, or a related field; equivalent practical experience also considered;\n\nMinimum 3 years of experience in IAM, information security, or identity engineering;\n\nHands-on experience with at least one enterprise IAM/SSO platform (Microsoft Entra ID, Keycloak, Okta, Ping, or ForgeRock);\n\nPractical experience configuring SSO, MFA, conditional access, and integrating applications via SAML, OIDC/OAuth, and SCIM;\n\nHands-on experience with Zero Trust Network Access (ZTNA) solutions (e.g., Zscaler Private Access, Microsoft Entra Private Access, Cloudflare Access);\n\nExperience with directory services (Active Directory, Entra ID, LDAP), including group and role design;\n\nWorking knowledge of identity governance (IGA) tooling (e.g., SailPoint, Saviynt, or Entra ID Governance) and access certification;\n\nFamiliarity with privileged access management (e.g., CyberArk, BeyondTrust, or Delinea);\n\nScripting and automation proficiency in PowerShell, Python, or Graph/REST APIs;\n\nPractical knowledge of PCI DSS Requirements 7 and 8, ISO/IEC 27001, and segregation-of-duties principles;\n\nEnglish proficiency sufficient for technical documentation, vendor communication, and reporting;\n\nEngineering mindset, analytical and detail-oriented, clear communicator, self-directed with a collaborative attitude.\n\nPreferred:\nProfessional certifications such as Microsoft SC-300, Okta Certified Administrator/Consultant, SailPoint IdentityNow, CISSP, or equivalent;\n\nWhat we offer:\nInteresting and challenging job;\n\nCompetitive base salary, learning and developing opportunities.\n\nInterested? Please fill in the information, attach your CV and submit by clicking “apply for position now”. The deadline for submitting applications is 7 Sep, 2026","description_format":"text","description_chars":3623,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Mining"],"lifecycle":[{"event":"open","at":"2026-10-14T02:01:14Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.431,"p_room":0.35,"age_days":50,"expected_fill_days":19,"reasons":["conf:4","win:tail"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/gc-iam-security-engineer","json_url":"https://alion.io/job/gc-iam-security-engineer.json","meta":{"generated_at":"2026-10-14T23:56:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":370,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":61085},"rest":"https://alion.io/mcp/rest/get_company?id=61085"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgc-iam-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgc-iam-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgc-iam-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gc-iam-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgc-iam-security-engineer"}]}