IAM Security Engineer – Senior

Job description

Overview: SOFTSWISS continues to expand the team and is looking for an experienced IAM Security Engineer to join us. We are seeking a hands-on professional with strong expertise in identity and access management, IAM integrations, and access lifecycle automation, who shares our culture and values. Purpose of the role: You will be responsible for designing, implementing, and maintaining secure and scalable identity and access management solutions, integrating IAM services across enterprise systems, and automating access lifecycle processes to ensure efficient and secure access management. Key responsibilities: Architect and implement IAM-related integrations using SCIM, SAML, OAuth, OIDC, and APIs. Lead automation of access lifecycle management processes. Design and implement RBAC/ABAC models across enterprise systems. Troubleshoot and resolve complex IAM-related incidents Integrate IAM services into CI/CD and Infrastructure-as-Code workflows. Provide technical expertise during identity-related investigations. Define secure configuration standards for IAM platforms. Develop and maintain high-quality technical documentation. Required Experience: Skills Advanced practical expertise in identity federation and modern authentication/authorization protocols (SAML 2.0, OAuth 2.0, OpenID Connect). Deep hands-on experience with Keycloak administration and configuration, including realm management, client configuration, role mapping, identity brokering, and custom authentication flows. Proven ability to design, build, and optimize Joiner/Mover/Leaver (JML) workflows using Adaxes or analog , including automation rules, business logic, and approval flows. Strong understanding of RBAC/ABAC implementation patterns. Experience designing and implementing secure API integrations (REST APIs, token-based authentication, service-to-service communication). Advanced troubleshooting and debugging capabilities across IAM ecosystems. Strong automation and scripting skills (e.g., PowerShell, Python, Bash) Ability to translate security requirements into scalable IAM solutions. Knowledge Strong knowledge of IAM architecture patterns and federation models. In-depth understanding of authentication flows, token lifecycle management, and access control enforcement mechanisms. Knowledge of identity lifecycle orchestration patterns and directory service integrations (e.g., Active Directory). Familiarity with PAM integration and privileged access governance concepts. Experience 3+ of experience in IAM or security engineering roles within enterprise environments. Proven hands-on experience administering and engineering solutions on the Keycloak platform, including realm design, client configuration, identity brokering, custom authentication flows, role mapping, and token management. Experience designing and implementing secure IAM integrations using APIs and federation protocols (SAML 2.0, OAuth 2.0, OpenID Connect). Hands-on experience building and optimizing automated Joiner/Mover/Leaver (JML) workflows using Adaxes, including approval logic and lifecycle orchestration. Demonstrated experience improving access lifecycle efficiency through automation and process redesign. Experience troubleshooting complex IAM, SSO, and federation-related incidents. Experience supporting identity-related security investigations and audit activities. Education and Qualification Bachelor’s or Master’s degree in Computer Science, Information Security, or related field. Advanced security certifications preferred (e.g., CISSP, CIAM, vendor IAM certifications). Our Benefits: Private health insurance Sports benefits Comprehensive Mental Health Program Free English lessons (online) Local language courses Paid time off Maternity leave support Referral program rewards Upskilling, internal workshops, and participation in professional conferences and corporate events