Security Engineer

Security Engineer

Miejsce pracy: Kraków

Technologies we use

Expected

• Google Cloud Platform
• Kubernetes
• IAM
• SIEM

Operating system

• Windows

About the project

Are you passionate about cybersecurity and ready to shape the next generation of Identity & Access Management? Join our client’s team as a Security Engineer – Project Orbit and help deliver a transformational programme introducing cutting-edge IAM capabilities on a global scale.

Our client is redefining Identity & Access Management (IAM) across one of the world’s largest financial institutions. This multi-year IAM transformation initiative will deliver state-of-the-art identity services for both human and non-human identities, built around Zero Trust principles and secure-by-design practices.

Sounds like your kind of challenge?

This is how we organize our work

This is how we work

• agile

Your responsibilities

• Design and implement security controls for IAM services and platforms.
• Apply Zero Trust and Secure by Design principles across solution delivery.
• Configure secure authentication and authorization mechanisms.
• Implement service-to-service security using mTLS and manage secrets, PKI, and key rotation.
• Define and enforce Policy-as-Code solutions (OPA or related tools).
• Perform comprehensive threat modelling, security reviews of designs and code, and vulnerability assessments.
• Integrate robust cloud security for GCP and Kubernetes environments.
• Support cryptographic processes, certificate lifecycle, and privileged access controls.
• Conduct security risk assessments and assist with penetration testing and remediation.
• Implement monitoring, logging, and alerting for compliance and operational readiness.
• Contribute to DevSecOps practices and automated security testing pipelines.
• Produce clear standards, hardening guides, and operational security documentation.
• Provide guidance during security events in collaboration with Security Operations and Incident Response teams.
• Note: Detailed project information will be shared during the recruitment process.

Our requirements

• Proven experience in Information Security Engineering and Identity & Access Management.
• Strong knowledge of Zero Trust Architecture, authentication/authorization mechanisms, and Policy-as-Code (OPA).
• Expertise in PKI, certificate management, cryptography, and secrets management solutions.
• Hands-on experience securing cloud platforms (GCP) and Kubernetes workloads.
• Familiarity with Service Mesh Security, API Security, and DevSecOps tooling.
• Ability to conduct SSDLC activities, threat modelling, and vulnerability management.
• Understanding of security monitoring, SIEM, security compliance, and governance frameworks.
• Experience supporting incident response and risk management activities.

What we offer

• Flexible cooperation model – choose the form that suits you best (B2B, employment contract, etc.).
• Hybrid work setup – 6 days a month from the office in Kraków
• Collaborative team culture – work alongside experienced professionals eager to share knowledge.
• Continuous development – access to training platforms and growth opportunities.
• Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more.
• High quality equipment – laptop and essential software provided.

This is how we work on a project

• Continuous Deployment
• Continuous Integration
• testing environments

Benefits

• sharing the costs of sports activities
• private medical care
• sharing the costs of professional training & courses
• life insurance

Joining this project you’ll become part of Mindbox – a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference.

Mindbox Sp. z o.o.

At Mindbox, we connect top IT talents with technology projects for leading enterprises across Europe.

Our focus is on matching your skills with work that matters – projects that use modern tech stacks, solve real business challenges, and give you space to grow. By joining us, you’ll deliver technology solutions for well-known brands, supported by the Mindbox team that values knowledge-sharing and continuous development. We make sure you have the tools, flexibility, and guidance to do your best work – and to keep moving forward in your career.