All vacancies


We are seeking an experienced IAM Security Architect to design and implement security architectures and controls for Identity and Access Management systems across enterprise, cloud and hybrid environments. In this role, you will shape IAM capabilities, strengthen access control models, and collaborate with cross-functional teams to embed identity security into enterprise solutions, while exploring AI-assisted tools to enhance IAM processes.
Responsibilities
- Design and implement security architectures and controls for IAM systems across enterprise, cloud and hybrid environments
- Gather business, technical and compliance requirements to design IAM solutions for new implementations, migrations and security improvements
- Define and improve IAM capabilities, including identity lifecycle management, provisioning/deprovisioning, SSO, federation, MFA, privileged access management and access governance
- Design and improve authentication, authorization and access control models, including RBAC, ABAC, least privilege and Zero Trust principles
- Conduct IAM security architecture reviews, risk assessments and access control design evaluations
- Develop IAM reference architectures, security standards, access control policies and identity governance guidelines
- Evaluate IAM technologies and solutions, including identity providers, IGA, PAM, federation platforms and cloud-native identity services
- Design and support IAM integrations with cloud platforms, SaaS applications, enterprise systems, directories and APIs
- Collaborate with cloud, infrastructure, development, security operations, compliance and enterprise architecture teams to integrate IAM security into enterprise solutions
- Support IAM automation using PowerShell, Python, REST APIs, SCIM or Terraform
Languages
- Work format
- Remote
- Seniority
- Senior
- Posted
- 12 Nov 2026
- Last verified
- In the last 3 days
Required
- 5+ years of information security experience, with a focus on IAM, identity security architecture or IAM engineering
- Knowledge of common IAM protocols and standards such as SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP or Kerberos
- Skills in IAM technologies such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt or CyberArk
- Understanding of cloud IAM concepts and identity security controls across at least one major cloud platform such as Azure, AWS or GCP
- Working knowledge of related security domains, including cloud security, network security, application security, data protection and security operations
- Understanding of security architecture principles and frameworks such as Zero Trust, NIST or ISO 27001
Nice to have
- Intermediate practical experience with AI-assisted tools and automation, including structured prompting, generating and validating scripts, queries, access policies and documentation with AI
- Strong communication and collaboration skills
- Experience integrating IAM solutions with SIEM/SOAR, security monitoring and automated response workflows
- Experience with AI automation, AI agents, Microsoft Copilot Studio, Azure OpenAI, Amazon Bedrock, Claude, LangChain or Power Automate
- Claude Certified Architect, AI-900: Microsoft Azure AI Fundamentals or AWS Certified AI Practitioner certifications

EPAM Systems
Global software engineering and digital product development company.
- Software engineering and IT services
- Founded in 1993
- Newtown, Pennsylvania, USA
- 5000+ employees
Other open roles here
- Senior/Lead Power BI Software EngineerRemote · Ukraine
- Delivery Manager (AI Native)Remote · Ukraine
- Senior Financial Manager (m/f/d)Remote · Germany
- Principal, Business ConsultingRemote · United States
- Senior Delivery Manager - .NET/JavaIndia · On-site · relocation
Similar roles
- Head of Information Security System Management Division/ IT and Cybersecurity DirectorateCENTRAL BANK OF ARMENIA · Armenia · On-site
- Information Security SpecialistFINCA UCO CJSC · Armenia · On-site
- Linux Cryptography and Security EngineerCanonical · Remote · worldwide
- Cybersecurity Specialist/ Cybersecurity Division/ IT and Cybersecurity DepartmentCENTRAL BANK OF ARMENIA · Armenia · On-site
- DataBase AdministratorPlata · Remote · worldwide
- MLOps Engineer_MLOps platform SquadAmeriabank CJSC · Armenia · Hybrid

