{"id":3683982,"url":"https://alion.io/job/mindbox-design-engineer","title":"Design Engineer","company":{"id":53456,"name":"Mindbox","domain":"mindboxgroup.com","url":"https://alion.io/company/mindbox","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Traffit","truth_index":{"grade":"A","score":86,"open_postings":59,"ghost_share":0,"stale_share":0.542,"repost_share":0.034,"time_to_fill_p50_days":54,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"PKI","optional":false},{"name":"Service Mesh","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-11-03T12:51:56Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-04T05:33:19Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"At Mindboxwe connect top IT talents with technology projects for leading enterprises across Europe.\nJoin our Client's team as a Design Engineer (IAM)!\nYou’ll act as a technical authority within the IAM Transformation Programme - shaping high-level (HLD) and low-level (LLD) designs, defining target architectures, and guiding delivery teams to build reliable and compliant identity solutions.\nPartnering with architects, product owners, and engineers, you’ll translate strategic security, regulatory, and business needs into secure, cloud-native identity controls built for scale and resilience.\nSounds like your kind of challenge?\nResponsibilities\nHybrid work setup - 6 days per month in the office in Kraków - remote days available depending on the client’s arrangements \nCollaborative team culture - work alongside experienced professionals eager to share knowledge \nContinuous development - access to training platforms and growth opportunities \nComprehensive benefits - including Interpolska Health Care, Multisport card, Warta Insurance, and more \nHigh quality equipment - laptop and essential software provided \nRequirements\nProduce High-Level (HLD) and Low-Level (LLD) architecture documents for IAM capabilities.\nDefine end-to-end technical solutions spanning application, data, and infrastructure domains.\nTranslate complex business, security, and regulatory requirements into practical, supportable designs.\nDevelop reference architectures, patterns, and reusable standards for IAM services.\nDesign secure integration between identity platforms, applications, and infrastructure layers.\nCreate cloud-native solutions leveraging GCP and Kubernetes, including service mesh design.\nDevelop authentication, authorisation, and federation models (OIDC, OAuth2, SAML, SCIM).\nImplement Agent Identity, Human Identity, and Workload Identity capabilities.\nDefine Zero Trust architectures and establish trust-boundary controls.\nDesign API security and service-to-service authentication patterns.\nDevelop event-driven integration architectures using messaging and asynchronous processing.\nDefine and implement Policy Decision Point (PDP) and Policy Enforcement Point (PEP) frameworks using Policy-as-Code (OPA/Cedar).\nCreate PKI, certificate management, and secret handling integration patterns.\nDesign for resilience, HA, and disaster recovery scenarios.\nProduce Architecture Decision Records (ADRs) and govern design consistency through Architecture Review Boards and Design Authorities.\nPerform solution assurance and design reviews across vendor and in-house deliveries.\nIdentify technical risks, assumptions, and dependencies early in the lifecycle.\nAlign architecture with enterprise strategy in collaboration with senior architects.\nSupport engineering delivery, testing, and readiness for production stages.\nMentor engineers and promote best practices across design teams.\nEvaluate emerging technologies and vendor products for alignment with IAM objectives.\nContribute to programme roadmap and future-state architecture planning.\n#Li-hybrid\nNote:Detailed project information will be shared during the recruitment process.\nBenefits\nEnterprise Architecture and Security Architecture expertise.\nDeep knowledge of Identity and Access Management (IAM) design and operations.\nProven experience with Authentication and Authorisation models.\nHands-on knowledge of Zero Trust Architectures.\nUnderstanding of Human, Agent, and Workload Identity solutions.\nExperience with Identity Federation protocols - OIDC, OAuth2, SAML, SCIM.\nExperience building Cloud Architectures on GCP or similar platforms.\nProficient with Kubernetes, Service Mesh, and containerised designs.\nStrong background in API Architecture and Security implementation.\nExperience with Event-Driven Architecture models.\nKnowledge of Policy-as-Code frameworks (OPA / Cedar).\nExpertise in PKI, Certificates, and Secret Management.\nExposure to DevSecOps and CI/CD environments.\nProven capability in designing for High Availability, Resilience, and Scalability.\nExperience overseeing Architecture Governance and Design Review Processes.\nStrong stakeholder engagement, communication, and technical leadership skills.\nJoining this project you’llbecome part of Mindbox - a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’llback you up every step of the way, accelerate your development, and ensure your skills make a difference.","description_format":"text","description_chars":4445,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Growth opportunities","Hybrid work"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Workflow & Process Automation (RPA, BPM)","IT Consulting & Digital Transformation","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-03T14:16:35Z"}],"visa":[],"liveness":{"score":70,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.695,"p_room":1,"age_days":0,"expected_fill_days":54,"reasons":["conf:1","stale_co","urgency","velocity","win:early","comp:brand"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/mindbox-design-engineer","json_url":"https://alion.io/job/mindbox-design-engineer.json","meta":{"generated_at":"2026-11-04T08:05:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12626,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":53456},"rest":"https://alion.io/mcp/rest/get_company?id=53456"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmindbox-design-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmindbox-design-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmindbox-design-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mindbox-design-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmindbox-design-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3683982}},{"tool":"search_jobs","arguments":{"company":"mindboxgroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3683982},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}