AI‑Augmented IAM Security Engineer

About the role

We are looking for an AI‑Augmented IAM Security Engineer to implement, configure, automate and operate enterprise Identity and Access Management solutions. This fully remote role supports the designs, standards and policies set by IAM architects and security leadership.

Key responsibilities

• Implement, configure and operate IAM solutions, including SSO, federation, MFA, passwordless authentication and RBAC/ABAC.
• Build and maintain identity lifecycle processes (joiner/mover/leaver) with automated provisioning and de‑provisioning.
• Develop and maintain integrations with cloud platforms, SaaS applications, directories, databases and APIs.
• Execute access certification campaigns, entitlement clean‑up and segregation‑of‑duties rules.
• Operate Privileged Access Management controls such as credential vaulting, secrets rotation and just‑in‑time access.
• Create automation scripts and workflows using PowerShell, Python, REST APIs, SCIM, Terraform or similar technologies.
• Monitor IAM platform health, troubleshoot incidents, apply patches and harden configurations.
• Build AI‑assisted automations and LLM‑backed agents to reduce manual effort in IAM operations.

Required profile

• Bachelor's degree in Computer Science, Cybersecurity, Engineering or equivalent practical experience.
• 2+ years of hands‑on experience with enterprise IAM, IGA, PAM or federation platforms.
• Understanding of IAM concepts (identity lifecycle, authentication, authorization, least‑privilege, privileged access).
• Experience working with developers, architects, security and compliance teams and following defined processes.
• Upper‑Intermediate English proficiency (B2) or higher.

Required skills

• PowerShell, Python or Bash scripting.
• REST APIs, SCIM, Terraform.
• IAM protocols and standards: SAML, OAuth 2.0, OpenID Connect, LDAP, Kerberos.
• Cloud IAM concepts on Azure, AWS or GCP.
• Experience with IAM controls, policies, connectors and access‑governance workflows.
• Practical knowledge of AI‑assisted automation, prompt engineering and secure use of LLMs.

What we offer

• Fully remote work from anywhere in Armenia.
• Opportunities to work abroad up to two months per year.
• Leadership development, career advising and soft‑skills programs.
• Certification support for GCP, Azure, AWS and IAM certifications.
• Free English classes, internal learning database and employee stock purchase plan.
• Comprehensive medical and family care package, fitness discounts and four trust days per year.