AI-Augmented IAM Security Engineer

AI-Augmented IAM Security Engineer 🏢 EPAM Systems 📍 Remote · Armenia 🕐 Full Time About the role We are seeking an AI-Augmented IAM Security Engineer to drive hands-on implementation, configuration, automation, and day-to-day operation of enterprise Identity and Access Management. This is a delivery-and-operations role that works within the designs, standards, role models, and policies set by IAM architects and security leadership. What you’ll do 🗂 • Implement, configure, and operate IAM solutions and controls based on architecture, standards, and designs defined by IAM architects and security leadership • Build and maintain identity lifecycle (Joiner / Mover / Leaver) processes, including automated provisioning and deprovisioning across target systems • Configure and maintain core IAM capabilities, including SSO, federation, MFA and passwordless authentication, conditional access, RBAC/ABAC role models, and least-privilege access • Develop, deploy, and maintain IAM integrations and connectors with cloud platforms, SaaS applications, enterprise systems, directories, authoritative source systems, databases, and APIs • Execute access certification and review campaigns, perform entitlement clean-up, and configure segregation-of-duties (SoD) rules according to access policies defined by architects and the business • Operate Privileged Access Management controls, including credential vaulting, secrets rotation, session management, and just-in-time and just-enough access What we’re looking for 🔎 • Knowledge of common IAM protocols and standards, such as SAML, OAuth 2.0, and OpenID Connect, as well as SCIM, LDAP, and Kerberos • Familiarity with cloud IAM concepts across at least one major cloud platform such as Azure, AWS, or GCP • Skills in scripting and automation using at least one of PowerShell, Python, or Bash, along with REST APIs, SCIM, or Terraform • Strong communication skills and the ability to explain IAM issues, technical decisions, and remediation steps to both technical and non-technical stakeholders • English proficiency at an Upper-Intermediate level (B2) or higher • Background in IAM platforms such as Microsoft Entra ID, Active Directory, or Okta, as well as Ping Identity, ForgeRock, Auth0, SailPoint, Saviynt, or CyberArk How to apply 🙋 Open on ITA Jobs and apply → More IT vacancies in Armenia, matched to your CV — jobs.ita.am/vacancies #SoftwareEngineering #Mid #NetworkSecurity