Описание вакансии от работодателя
Overview:
SOFTSWISS is looking for an IAM Security Operations Engineer to maintain and troubleshoot IAM services, manage identity lifecycle processes (JML), and ensure secure, role-based access across our systems.
Key responsibilities:
Handle complex and non-standard JML scenarios
Perform technical troubleshooting of IAM services (SSO, IdP, provisioning flows), including Keycloak
Configure and maintain Adaxes automation tool: automation rules, approval-based workflows, role-based permissions, etc
Implement changes in IAM services and integrations (Keycloak, Adaxes,etc)
Process Joiner/Mover/Leaver (JML) access requests in alignment with approved RBAC models
Automate repetitive access management tasks
Validate access requests against least privilege and segregation of duties principles
Write technical and user documentation, including models (e.g., UML)
Monitor IAM platform health and proactively identify risks
Assist users with access and system requests in alignment with Security standards and procedures
Required Experience:
2+ years in IAM, identity operations, or security engineering roles
Experience in maintaining and troubleshooting IAM – related services (Keycloak, Adaxes, GWS)
Experience maintaining secure IAM integrations using APIs and federation protocols (SAML 2.0, OAuth 2.0, OpenID Connect)
Hands-on experience with RBAC configuration and provisioning workflows
Solid understanding of IAM architecture concepts
Working knowledge of SSO, MFA, provisioning, and directory services
Understanding of identity-related security risks
Strong troubleshooting and log analysis skills
Understanding of identity protocols (SAML, OAuth, OIDC – operational level)
Ability to communicate clearly with business users
Ability to work independently on technical incidents
Scripting or automation capability (e.g., Python, PowerShell, Bash)
Intermediate or higher English (B1+) and strong command of Russian