IAM Solution Designer – Cloud and Zero Trust Security

Unleash the Future of Identity Security — architect innovative solutions at a global scale!

Krakow-based opportunity with hybrid work model.

As an IAM Solution Designer, you will be working for our client, a leader in redefining identity and access management on a worldwide level through a transformative program (Project Orbit / IDAM 2.0). You will contribute to building secure, scalable identity solutions that bridge modern technology with the complexity of a major financial institution, driving innovation and security across the enterprise.

Your main responsibilities:

• Design high-level and low-level solution architectures for identity capabilities across diverse domains.
• Translate business, security, and regulatory requirements into robust technical solutions.
• Develop reference architectures, patterns, and standards for the program.
• Define integration patterns for identity platforms, applications, and infrastructure.
• Architect cloud-native solutions for GCP and Kubernetes environments.
• Design authentication, authorization, and federation architectures.
• Develop policies for Agent, Human, and Workload Identity capabilities.
• Establish Zero Trust security architecture and trust boundaries.
• Outline API security, service-to-service authentication, and workload authentication standards.
• Create event-driven architectures utilizing messaging and asynchronous processing.
• Support governance with architecture review procedures and design documentation.
• Collaborate with engineering teams to ensure successful implementation, testing, and deployment.
• Mentor engineers and uphold best practices in engineering.
• Evaluate emerging technologies for alignment with project goals and future roadmap planning.

You're ideal for this role if you have:

• Enterprise solution architecture experience, specifically in IAM.
• Strong expertise in authentication and authorization design.
• Proven experience with Zero Trust architecture.
• Hands-on knowledge of cloud environments, especially GCP and Kubernetes.
• Skills in identity federation protocols: OIDC, OAuth2, SAML, SCIM.
• Deep understanding of API architecture, security, and event-driven systems.
• Proficiency in Policy-as-Code (OPA/Cedar), PKI, certificates, and secrets management.
• Experience in designing high availability, resilience, and disaster recovery solutions.
• Strong stakeholder management and technical leadership abilities.

It is a strong plus if you have:

• Certification in cloud architecture or security (e.g., CCSK, CCSP, AWS/Azure certifications).
• Knowledge of DevSecOps and CI/CD pipelines.

Language required for the role: Fluent English

Eligibility for the role: Only candidates with an existing legal right to work in the European Union will be considered for this role.

#MAKEYourCareerBETTER

Interested? Apply now and include your CV (preferably in English) along with a statement confirming your consent to the processing and storage of your personal data.

Tech stack

• IAM Architecture
• Zero Trust security
• Google Cloud Platform (GCP)
• Kubernetes
• OAuth2 / OIDC / SAML / SCIM
• API security
• Policy-as-Code (OPA/Cedar)
• PKI and Secrets Management
• DevSecOps / CI/CD
• Cloud Security Certifications (CCSK/CCSP)