Expert IAM Architect – Cloud & Zero Trust

Transform global identity security — architect cloud-native IAM solutions built for scale, resilience, and Zero Trust.

Krakow-based opportunity with a hybrid work model, including up to 4 remote days per week.

As an Expert IAM Architect, you will be working for our client, a global banking organisation undertaking a long-term transformation of its Identity and Access Management capabilities. You will help define and deliver secure, scalable, and supportable identity services across authentication, authorisation, federation, human identities, agent identities, and workload identities. This role offers the opportunity to shape enterprise architecture across cloud, Kubernetes, API security, and Zero Trust environments.

Your main responsibilities:

• Produce high-level and low-level designs for enterprise identity capabilities.
• Define end-to-end technical solutions across business, application, data, and infrastructure domains.
• Design cloud-native IAM solutions for GCP and Kubernetes environments.
• Develop authentication, authorisation, federation, API security, and service-to-service authentication architectures.
• Define Zero Trust, Policy-as-Code, secrets management, certificate lifecycle, and PKI integration patterns.
• Design event-driven integrations, resilience, disaster recovery, high availability, and non-functional capabilities.
• Lead architecture governance through design reviews, Architecture Review Boards, technical assurance, and architecture decision records.
• Support engineering teams throughout implementation, testing, and production readiness while mentoring engineers and promoting best practices.

You're ideal for this role if you have:

• At least 8 years of experience in enterprise architecture, security architecture, or a related technical field.
• Strong Identity and Access Management expertise, including authentication, authorisation, and identity federation.
• Experience with OIDC, OAuth2, SAML, and SCIM.
• Practical knowledge of Zero Trust Architecture, Agent Identity, and Workload Identity.
• Expertise in GCP, Kubernetes, service mesh, API architecture, and API security.
• Experience with event-driven architecture, messaging, asynchronous processing, and Policy-as-Code using OPA or Cedar.
• Knowledge of PKI, certificates, secrets management, DevSecOps, and CI/CD.
• Strong stakeholder management, technical leadership, architecture governance, and design review experience.

It is a strong plus if you have:

• Experience designing enterprise IAM solutions within large-scale banking or similarly complex environments.
• Experience defining high availability, resilience, and disaster recovery architectures.
• Experience evaluating technology and vendor products against strategic programme requirements.
• Experience working with Enterprise Architecture, Product Owners, engineering teams, and external suppliers.

Language Required for the role: Fluent English.

Eligibility for the role: Only candidates with an existing legal right to work in Europe will be considered for this role.

#MAKEYourCareerBETTER

Interested? Apply now and include your CV (preferably in English) along with a statement confirming your consent to the processing and storage of your personal data.

Tech stack

• Identity and Access Management (IAM)
• Zero Trust Architecture
• OIDC / OAuth2 / SAML / SCIM
• Google Cloud Platform (GCP)
• Kubernetes
• PKI & Secrets Management
• API Security & Architecture
• Enterprise Architecture Governance
• Policy-as-Code (OPA / Cedar)
• Event-Driven Architecture