Identity and Access Management (IAM) Engineer

Requirements

• Proven experience as an IAM Engineer with a deep focus on identity management within a production environment.
• Strong, hands-on experience working with open-source IAM solutions (e.g., FreeIPA, Keycloak, midPoint).
• Deep technical understanding of core identity protocols and standards, specifically LDAP, SAML, OAuth, and OIDC.
• Strong proficiency in scripting languages (e.g., Python, Bash) for automation, integration, and tooling tasks.
• Solid background in system engineering, particularly with managing, deploying, and maintaining complex self-hosted solutions.
• Ability to adapt quickly in a fast-paced environment.
• Strong communication and interpersonal skills, with a proven track record of collaborating effectively across engineering and non-engineering teams.

Nice to Haves

• Advanced proficiency in implementing, configuring, and maintaining midPoint.
• Hands-on experience with configuration management and infrastructure-as-code tools (such as Ansible, Puppet).
• Prior experience managing identity governance frameworks, including compliance reporting and access re-certification campaigns.
• Relevant industry certifications in IAM-related technologies (e.g., CIDPRO certification).

What You'll Be Doing

• IAM Architecture & Implementation
  • Design, implement, integrate, and maintain Proton’s core IAM solutions, ensuring high availability, security, and scalability.
  • Manage and maintain systems and applications built on self-hosted, and open-source environments.
  • Collaborate closely with cross-functional engineering teams to integrate the IAM platform seamlessly into our existing infrastructure and internal tools.
• User Lifecycle & Governance
  • Develop, implement, and maintain secure automated processes for user provisioning, de-provisioning, and overall account lifecycle management to ensure seamless onboarding and offboarding.
  • Design and manage identity governance processes to ensure proper management of user access rights, entitlements, and strict alignment with organizational compliance standards.
  • Conduct regular audits, assessments, and access re-certification campaigns to proactively discover and remediate access anomalies.
• Authentication & Access Control
  • Configure, optimize, and manage access control, authentication, and authorization mechanisms.
  • Develop and enforce granular policies for identity and access management in alignment with organizational security goals.
  • Support, maintain, and contribute to specialized infrastructure projects.
• Automation & Systems Engineering
  • Leverage your scripting and automation expertise to eliminate operational toil and streamline identity workflows.
  • Write high-quality, maintainable code for infrastructure automation and configuration management.

Perks and Benefits

• Work that Matters: millions of people trust Proton with their privacy.
• Stock Options: all employees have the opportunity to be owners of the company.
• Technology: access to the right hardware and software for optimal work performance.
• Learning & Development: investment in employee growth.
• Employee Benefits: comprehensive health coverage, retirement options, generous leave, and wellness support.
• In-Person Collaboration: offices across multiple locations for face-to-face collaboration.
• Food: daily lunch and snacks provided in offices.
• Transport: coverage of public transport, bike allowances, or parking.
• Flexible Working: ownership of schedule to prioritize outcomes over hours.