IAM Security Operations Engineer – Middle

Overview:

SOFTSWISS is looking for an IAM Security Operations Engineer to maintain and troubleshoot IAM services, manage identity lifecycle processes (JML), and ensure secure, role-based access across our systems.

Key responsibilities:

• Handle complex and non-standard JML scenarios
• Perform technical troubleshooting of IAM services (SSO, IdP, provisioning flows), including Keycloak
• Configure and maintain Adaxes automation tool: automation rules, approval-based workflows, role-based permissions, etc
• Implement changes in IAM services and integrations (Keycloak, Adaxes,etc)
• Process Joiner/Mover/Leaver (JML) access requests in alignment with approved RBAC models
• Automate repetitive access management tasks
• Validate access requests against least privilege and segregation of duties principles
• Write technical and user documentation, including models (e.g., UML)
• Monitor IAM platform health and proactively identify risks
• Assist users with access and system requests in alignment with Security standards and procedures

Required Experience:

• 2+ years in IAM, identity operations, or security engineering roles
• Experience in maintaining and troubleshooting IAM – related services (Keycloak, Adaxes, GWS)
• Experience maintaining secure IAM integrations using APIs and federation protocols (SAML 2.0, OAuth 2.0, OpenID Connect)
• Hands-on experience with RBAC configuration and provisioning workflows
• Solid understanding of IAM architecture concepts
• Working knowledge of SSO, MFA, provisioning, and directory services
• Understanding of identity-related security risks
• Strong troubleshooting and log analysis skills
• Understanding of identity protocols (SAML, OAuth, OIDC – operational level)
• Ability to communicate clearly with business users
• Ability to work independently on technical incidents
• Scripting or automation capability (e.g., Python, PowerShell, Bash)
• Intermediate or higher English (B1+) and strong command of Russian