Expert IAM Solution Architect - Cloud and Zero Trust Security

Unleash the Future of Identity Security — architect innovative solutions at a global scale! Krakow-based opportunity with hybrid work model. As an IAM Solution Architect, you will be working for our client, a leader in redefining identity and access management on a worldwide level through a transformative program (Project Orbit / IDAM 2.0). You will contribute to building secure, scalable identity solutions that bridge modern technology with the complexity of a major financial institution, driving innovation and security across the enterprise. Your main responsibilities: Design high-level and low-level solution architectures for identity capabilities across diverse domains.Translate business, security, and regulatory requirements into robust technical solutions.Develop reference architectures, patterns, and standards for the program.Define integration patterns for identity platforms, applications, and infrastructure.Architect cloud-native solutions for GCP and Kubernetes environments.Design authentication, authorization, and federation architectures.Develop policies for Agent, Human, and Workload Identity capabilities.Establish Zero Trust security architecture and trust boundaries.Outline API security, service-to-service authentication, and workload authentication standards.Create event-driven architectures utilizing messaging and asynchronous processing.Support governance with architecture review procedures and design documentation.Collaborate with engineering teams to ensure successful implementation, testing, and deployment.Mentor engineers and uphold best practices in engineering.Evaluate emerging technologies for alignment with project goals and future roadmap planning. You're ideal for this role if you have: At least 8 years of enterprise solution architecture experience, specifically in IAM.Strong expertise in authentication and authorization design.Proven experience with Zero Trust architecture.Hands-on knowledge of cloud environments, especially GCP and Kubernetes.Skills in identity federation protocols: OIDC, OAuth2, SAML, SCIM.Deep understanding of API architecture, security, and event-driven systems.Proficiency in Policy-as-Code (OPA/Cedar), PKI, certificates, and secrets management.Experience in designing high availability, resilience, and disaster recovery solutions.Strong stakeholder management and technical leadership abilities. It is a strong plus if you have: Certification in cloud architecture or security (e.g., CCSK, CCSP, AWS/Azure certifications).Knowledge of DevSecOps and CI/CD pipelines. Language required for the role: Fluent English Eligibility for the role: Only candidates with an existing legal right to work in the European Union will be considered for this role. #MAKEYourCareerBETTER Interested? Apply now and include your CV (preferably in English) along with a statement confirming your consent to the processing and storage of your personal data.