Nasze wymagania:
EnterpriseArchitecture and SecurityArchitecture expertise. Deep knowledge of IdentityandAccessManagement(IAM) design and operations. Proven experience with AuthenticationandAuthorisationmodels. Hands on knowledge of ZeroTrustArchitectures. Understanding of Human,Agent,andWorkloadIdentity solutions. Experience with IdentityFederation protocols —OIDC,OAuth2,SAML,SCIM. Experience building CloudArchitectures on GCP or similar platforms. Proficient with Kubernetes,ServiceMesh,andcontaineriseddesigns. Strong background in APIArchitectureandSecurityimplementation. Experience with Event DrivenArchitecture models. Knowledge of Policy as Code frameworks (OPA/Cedar). Expertise in PKI,Certificates,andSecretManagement. Exposure to DevSecOpsandCI/CDenvironments. Proven capability in designing for HighAvailability,Resilience,andScalability. Experience overseeing ArchitectureGovernanceandDesignReviewProcesses. Strong stakeholder engagement, communication, and technicalleadershipskills. O projekcie:
You’ll act as a technical authority within the IAMTransformationProgramme — shaping high level(HLD) and low level(LLD) designs, defining target architectures, and guiding delivery teams to build reliable and compliant identity solutions. Zakres obowiązków:
Produce High Level(HLD) and Low Level(LLD) architecture documents for IAMcapabilities. Define end to end technical solutions spanning application, data, and infrastructure domains. Translate complex business, security, and regulatory requirements into practical, supportable designs. Develop reference architectures, patterns, and reusable standards for IAMservices. Design secure integration between identity platforms, applications, and infrastructure layers. Create cloud native solutions leveraging GCPandKubernetes, including servicemesh design. Develop authentication, authorisation, and federation models (OIDC,OAuth2,SAML,SCIM). Implement AgentIdentity,HumanIdentity,andWorkloadIdentity capabilities. Define ZeroTrustarchitectures and establish trust boundary controls. Design APIsecurity and service to service authenticationpatterns. Develop event driven integration architectures using messaging and asynchronous processing. Define and implement PolicyDecisionPoint(PDP) and PolicyEnforcementPoint(PEP) frameworks using Policy as Code(OPA/Cedar). Create PKI, certificatemanagement, and secrethandling integration patterns. Design for resilience,HA,anddisasterrecoveryscenarios. Produce ArchitectureDecisionRecords(ADRs) and govern design consistency through ArchitectureReviewBoardsandDesignAuthorities. Perform solutionassurance and designreviews across vendor and in house deliveries. Identify technicalrisks,assumptions,anddependencies early in the lifecycle. Align architecture with enterprise strategy in collaboration with senior architects. Support engineeringdelivery, testing, and readiness for production stages. Mentorengineers and promote best practices across design teams. Evaluate emerging technologies and vendor products for alignment with IAMobjectives. Contribute to programmeroadmapandfuture statearchitectureplanning. Note: Detailed project information will be shared during the recruitment process. Oferujemy:
Hybrid work setup – 6 days per month in the office in Kraków - remote days available depending on the client’s arrangements Collaborative team culture – work alongside experienced professionals eager to share knowledge Continuous development – access to training platforms and growth opportunities Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more High quality equipment – laptop and essential software provided
#J-18808-Ljbffr
Design Engineer (IAM) in Kraków – pracodawca: Mindbox Sp. z o.o.
Mindbox to doskonały pracodawca, który oferuje elastyczny model współpracy oraz hybrydowy tryb pracy z biura w Warszawie. Nasza kultura pracy opiera się na współpracy i dzieleniu się wiedzą, a także zapewniamy ciągły rozwój zawodowy poprzez dostęp do platform szkoleniowych i różnorodnych możliwości rozwoju. Oferujemy kompleksowe benefity, w tym prywatną opiekę medyczną oraz kartę Multisport, co czyni nas atrakcyjnym miejscem dla specjalistów IT szukających znaczącej i satysfakcjonującej pracy.
