{"id":2532255,"url":"https://alion.io/job/goldman-sachs-engineering-security-engineering-warsaw-associate-vidm-iam","title":"Engineering - Security Engineering - Warsaw- Associate - VIDM - IAM","company":{"id":2794,"name":"Goldman Sachs","domain":"goldmansachs.com","url":"https://alion.io/company/goldman-sachs","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":86,"open_postings":92,"ghost_share":0,"stale_share":0.739,"repost_share":0.011,"time_to_fill_p50_days":18,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Warsaw, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":56000,"max_usd":119000,"period":"year","method":"role_country_seniority_unknown","sample_n":159},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Active Directory","optional":true},{"name":"AI Agents","optional":true},{"name":"Auth0","optional":true},{"name":"CI/CD","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"Okta","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-10-14T09:30:37Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-27T15:56:04Z","board_verified":true,"closed_at":null,"days_open":13,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":13},"description":"WHO WE ARE\nLed by the Chief Information Security Officer (CISO), Technology Risk secures Goldman Sachs against cyber threats. We are responsible for detecting and preventing attempted cyber intrusions against the firm, helping the firm develop more secure applications and infrastructure, developing software in support of our efforts, measuring cybersecurity risk, and designing and driving implementation of cybersecurity controls. The team has global presence across the Americas, APAC and EMEA. Within Technology Risk, the Vulnerability, Identity & Data Management (VIDM) TechRisk team is the consultative and technology subject matter expertise arm, responsible for assessing new technology initiatives for risk, partnering with engineers to architect and design secure products and services, embedding implementation reviews and guiding technology innovation in terms of security and control across Goldman Sachs.\nOUR MISSION\nThe TechRisk IAM team safeguards Goldman Sachs identities as the first line of defense by collaborating with Engineering Teams, Operational Risk, and Internal Audit to establish robust controls and good practices for identity and access management - fostering a secure, resilient, and compliant environment for internal employees and external customers of the Firm.\nIn delivering on this mission, the TechRisk VIDM IAM team must:\nCollaborate with the rest of Technology Risk on information security and cybersecurity risk management throughout the firm across the IAM domain.\n\nEstablish and maintain appropriate policies, standards, and controls to adequately address information security risks in accordance with best practices and applicable regulations across the IAM domain.\n\nConduct ongoing testing and monitoring to evaluate adoption of necessary Engineering controls.\n\nEnsure that the firm's senior management and Board of Directors are cognizant of changes in the information security environment across the IAM domain.\n\nYOUR IMPACT\nIn this role, you will join the global Identity and Access Management (IAM) pillar within the VIDM TechRisk team, specifically the IAM Security, Strategy, Architecture and Platforms sub-pillar - the team is responsible for defining the security requirements, controls and standards that protect the firm's IAM platforms and identity flows against an evolving threat landscape and driving strategic initiatives to uplift the security posture of IAM flows within the firm and conducting security architecture reviews to ensure compliance with defined controls. You will interact with all parts of the firm, giving you the opportunity to grow within the Technology Risk team as well as other divisions within the firm.\nHOW YOU WILL FULFILL YOUR POTENTIAL\nThe IAM Security, Strategy, Architecture and Platforms sub-pillar, within the Identity and Access Management (IAM) pillar of the VIDM TechRisk team, is responsible for defining the security requirements, controls and standards that protect the firm's IAM platforms and identity flows against an evolving threat landscape and driving strategic initiatives to uplift the security posture of IAM flows within the firm and conduct security architecture reviews to ensure compliance with defined controls\nYou will become a highly committed, trusted Risk Advisor with the discipline and interpersonal skills to work in a global environment, communicating the impact of technology risks and the approach to mitigation and acceptance. You will provide VIDM TechRisk risk assessment and advisory services to engineers as part of the Technology Risk function, while contributing directly to the team's strategic objectives.\nIDEAL CANDIDATE\nThe ideal candidate is a technically grounded cybersecurity specialist with a focus on the IAM domain who combines engineering excellence with the judgment of a trusted risk advisor. They are equally comfortable reading a federation metadata file, debugging a Kerberos ticket flow, reviewing a NIST control mapping, and explaining identity risk to senior stakeholders.\nJOB RESPONSIBILITIES\nAs part of the IAM Security, Strategy, Architecture and Platforms sub-pillar within the VIDM TechRisk team, you will:\nProvide IAM risk advisory services to engineering teams, partnering onthe design and architecture of secure identity, authentication, and authorization solutions.\n\nIdentify security flaws in IAM platforms and integrations, andprovide security assurance advice and guidance to engineers to help them manage application risks.\n\nReview, triage, and remediate findings by interfacing with Business Units and Engineering teams, and help raise developer security awareness around identity best practices.\n\nEstablish and maintain policies, standards, and controls to address information security risks across the IAM domain, in line with best practices and applicable regulations.\n\nConduct ongoing testing and monitoring to evaluate adoptionof necessary engineering controls in the IAM space.\n\nBASIC QUALIFICATIONS\nBachelor's degree in Computer Science, Information Security, or a relateddiscipline or equivalent industry experience.\n\nDemonstrated knowledge of fundamental cybersecurity concepts and experience assessing systems, applications, or architectures for security weaknesses through activities such as threat modeling, security architecture reviewor penetration testing.\n\nUnderstanding of common attacker tactics, techniques, and procedures used to compromise identities, credentials, authentication flows, sessions, tokens, and authorization controls, and the ability to apply that knowledge during threat modeling and security architecture reviews.\n\nTechnical knowledge of industry-standard authentication and authorization protocols, including: OpenID Connect (OIDC), OAuth 2.0, SAML 2.0, Kerberos, WIMSE / SPIFFE (workload identity).\n\nFamiliarity with cryptographic primitives as applied to identity - token signing, key management, certificate-based authentication, and mTLS.\n\nAbility to review, triage, and remediate IAM-related security findings in partnership with engineering teams.\n\nStrong interpersonal and communication skills to operate effectively in a global, cross-functional environment.\n\nFluent English.\n\nPreferred Qualifications:\nUnderstanding of Privileged Access Management (PAM), phishing-resistant MFA, Separation of Duties (SoD), and Zero Trust architectures.\n\nDemonstrated interest or experience in the regulatory and controls aspects of IAM including policy authoring, control design, or regulatory engagement within the IAM space.\n\nPractical experience with one or more of the following IAM technology stacks: Microsoft Entra ID and Active Directory, Heimdal Kerberos and MIT Kerberos, Ping Federate, Auth0, Okta.\n\nExperience integrating IAM controls into the SDLC and CI/CD pipelines, including automated control validation.\n\nGenuine interest in Agentic AI authentication and authorization - identity for autonomous agents, delegated authority models, and scoped tokens for AI workloads.\n\nExperience in hybrid and native public cloud IAM environments.\n\nCybersecurity Industry certifications such as CISSP, CISM, CCSP, SANS GIAC (GSEC, GCIH, GPCS), or vendor-specific IAM certifications (Okta, Ping, Microsoft Identity).\n\nPrior experience in financial services or another highly regulated industry.\n\nABOUT GOLDMAN SACHS\nAt Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.\nWe believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.\nWe’re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more: https://www.goldmansachs.com/careers/footer/disability-statement.html\n© The Goldman Sachs Group, Inc., 2026. All rights reserved.\nGoldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veterans status, disability, or any other characteristic protected by applicable law.","description_format":"text","description_chars":8600,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Wealth Management & Financial Advisors","Asset Management & Funds","Information Security","Investment Banking & M&A Advisory"],"lifecycle":[{"event":"open","at":"2026-10-14T13:07:16Z"}],"visa":[],"liveness":{"score":39,"band":"fade","label":"Fading","p_open":1,"p_active":0.523,"p_room":0.75,"age_days":12,"expected_fill_days":18,"reasons":["conf:0","stale_co","velocity","win:late","comp:brand"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/goldman-sachs-engineering-security-engineering-warsaw-associate-vidm-iam","json_url":"https://alion.io/job/goldman-sachs-engineering-security-engineering-warsaw-associate-vidm-iam.json","meta":{"generated_at":"2026-10-27T17:41:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7384,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2794},"rest":"https://alion.io/mcp/rest/get_company?id=2794"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgoldman-sachs-engineering-security-engineering-warsaw-associate-vidm-iam"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgoldman-sachs-engineering-security-engineering-warsaw-associate-vidm-iam"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgoldman-sachs-engineering-security-engineering-warsaw-associate-vidm-iam"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/goldman-sachs-engineering-security-engineering-warsaw-associate-vidm-iam\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgoldman-sachs-engineering-security-engineering-warsaw-associate-vidm-iam"}]}