Design Engineer (IAM)

Our requirements

• Enterprise Architecture and Security Architecture expertise.
• Deep knowledge of Identity and Access Management (IAM) design and operations.
• Proven experience with Authentication and Authorisation models.
• Hands on knowledge of Zero Trust Architectures.
• Understanding of Human, Agent, and Workload Identity solutions.
• Experience with Identity Federation protocols — OIDC, OAuth2, SAML, SCIM.
• Experience building Cloud Architectures on GCP or similar platforms.
• Proficient with Kubernetes, Service Mesh, and containerised designs.
• Strong background in API Architecture and Security implementation.
• Experience with Event Driven Architecture models.
• Knowledge of Policy as Code frameworks (OPA / Cedar).
• Expertise in PKI, Certificates, and Secret Management.
• Exposure to DevSecOps and CI/CD environments.
• Proven capability in designing for High Availability, Resilience, and Scalability.
• Experience overseeing Architecture Governance and Design Review Processes.
• Strong stakeholder engagement, communication, and technical leadership skills.

Your responsibilities

• Produce High Level (HLD) and Low Level (LLD) architecture documents for IAM capabilities.
• Define end to end technical solutions spanning application, data, and infrastructure domains.
• Translate complex business, security, and regulatory requirements into practical, supportable designs.
• Develop reference architectures, patterns, and reusable standards for IAM services.
• Design secure integration between identity platforms, applications, and infrastructure layers.
• Create cloud native solutions leveraging GCP and Kubernetes, including service mesh design.
• Develop authentication, authorisation, and federation models (OIDC, OAuth2, SAML, SCIM).
• Implement Agent Identity, Human Identity, and Workload Identity capabilities.
• Define Zero Trust architectures and establish trust boundary controls.
• Design API security and service to service authentication patterns.
• Develop event driven integration architectures using messaging and asynchronous processing.
• Define and implement Policy Decision Point (PDP) and Policy Enforcement Point (PEP) frameworks using Policy as Code (OPA/Cedar).
• Create PKI, certificate management, and secret handling integration patterns.
• Design for resilience, HA, and disaster recovery scenarios.
• Produce Architecture Decision Records (ADRs) and govern design consistency through Architecture Review Boards and Design Authorities.
• Perform solution assurance and design reviews across vendor and in house deliveries.
• Identify technical risks, assumptions, and dependencies early in the lifecycle.
• Align architecture with enterprise strategy in collaboration with senior architects.
• Support engineering delivery, testing, and readiness for production stages.
• Mentor engineers and promote best practices across design teams.
• Evaluate emerging technologies and vendor products for alignment with IAM objectives.
• Contribute to programme roadmap and future state architecture planning.
• Note: Detailed project information will be shared during the recruitment process.

About the project

This is how we organize our work

This is how we work on a project

• Continuous Deployment
• Continuous Integration

What we offer

• Hybrid work setup – 6 days per month in the office in Kraków - remote days available depending on the client’s arrangements
• Collaborative team culture – work alongside experienced professionals eager to share knowledge
• Continuous development – access to training platforms and growth opportunities
• Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more
• High quality equipment – laptop and essential software provided

Benefits

• sharing the costs of sports activities
• private medical care
• sharing the costs of professional training & courses
• life insurance

Mindbox Sp. z o.o.