IAM Security Engineer

Job Description

Join us and get a once-in-a-lifetime opportunity to literally build a local banking champion!

Yes, you can! That's our attitude towards our work, ambitions, ideas, and relationships.We at Luminor believe that anyone has the potential to achieve big things and encourage everyone to achieve them,professionally and personally.

Whoever you are and whatever your role is, with Luminor, you will get a once-in-a-lifetime opportunity to build a local banking champion.

We are looking for an IAM Security Engineer to join our Security Engineering team and help build, automate, and continuously improve the identity services that protect access to critical systems across the bank. This role is ideal for someone who enjoys working with identity technologies, automation, cloud platforms, and modern infrastructure, while solving complex authentication, authorization, and access management challenges.

How You Will Make an Impact:

• Design, implement, and maintain Identity & Access Management (IAM) solutions across cloud and on-premise environments
• Configure and enhance identity services, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and access governance capabilities
• Manage and improve IAM capabilities across AWS IAM, Microsoft Entra ID, and Active Directory environments
• Automate identity lifecycle and access management processes using scripting, Infrastructure as Code, and modern DevOps practices
• Define and implement role-based access controls, policies, and permissions aligned with business and security requirements
• Monitor IAM platforms, troubleshoot authentication and authorization issues, and contribute to incident investigations and resolution
• Collaborate with cloud, infrastructure, security, and application teams to ensure secure and efficient identity services
• Contribute to IAM governance, security controls, and compliance initiatives across the organization
• Drive continuous improvements in automation, operational efficiency, and platform reliability

Requirements

• 5+ years of experience in IAM, security engineering, infrastructure engineering, or a similar technical role
• Hands-on experience with identity technologies such as SSO, MFA, IAM, IGA, or PAM solutions
• Strong understanding of authentication protocols and access control concepts, including OAuth, SAML, OIDC, LDAP, and role-based access control
• Practical experience with Microsoft Entra ID/Azure AD, Active Directory, and/or AWS IAM
• Experience with automation and scripting using PowerShell, Python, Java, or similar technologies
• Experience with cloud environments and modern infrastructure practices
• Good understanding of security principles, identity governance, and access management controls
• Strong analytical and troubleshooting skills, with the ability to investigate and resolve complex identity-related issues
• Ability to work independently, take ownership, and collaborate effectively across technical and business teams
• Fluent English is required in spoken and written communication due to working on Pan-Baltic level

Nice to have

• Experience with SailPoint, CyberArk, Delinea, Okta, Ping Identity, ForgeRock, Oracle IAM, IBM Security Verify, or similar platforms
• Experience with Infrastructure as Code, CI/CD, and DevOps practices
• Knowledge of regulatory and compliance frameworks such as GDPR, DORA, PSD2, ISO 27001, or NIST
• AWS, Microsoft, IAM, PAM, CISSP, CISM, or similar certifications
• Experience within banking, financial services, or another highly regulated environment

Company offers

• Flexibility. Flexible working hours, Hybrid work, and the possibility to work from anywhere in the EU, Iceland, Switzerland, and the UK (in total 90 days per year)
• International teams. Teams that go outside Pan-Baltic borders, where people value challenging work together with good humor and having fun
• Culture. You’ll be joining a team where things move fast, ideas flow freely, and change is part of the everyday. It’s a dynamic environment that keeps you learning, growing, and never bored
• More vacation. Additional weeks of vacation are available to all employees who have been in the company for 1 year or more
• Volunteer time off. We care about giving back to society, therefore, you will get additional days off for volunteering purposes
• Paid leave. We are proud of our employees who are participating in military training. Therefore, Luminor offers 30 fully paid calendar days for military training every year
• Health benefits. A competitive benefits package in addition to your salary that includes health insurance after the first 3 months pass in all three Baltic states, as well as Health days in case of your absence due to sickness without a doctor's note needed
• Wellbeing. Access to tools and resources that help you feel good and be productive at work and in life
• Professional growth. Internal and external training programs, LinkedIn learning, workshops, conferences, online training, etc
• Special Offer for Luminor products & services. Enjoy special offers & pricing for products and services provided by Luminor