IAM Security Operations Engineer – Middle

About the role

SOFTSWISS is expanding its Security team and seeks an IAM Security Operations Engineer to maintain and troubleshoot IAM services, manage identity lifecycle processes, and ensure secure, role‑based access across the organization.

Key responsibilities

• Handle complex and non‑standard Joiner/Mover/Leaver (JML) scenarios.
• Perform technical troubleshooting of IAM services such as SSO, IdP, and provisioning flows, including Keycloak.
• Configure and maintain the Adaxes automation tool (rules, approval workflows, role‑based permissions).
• Implement changes in IAM services and integrations (Keycloak, Adaxes, etc.).
• Process JML access requests in alignment with approved RBAC models.
• Automate repetitive access‑management tasks.
• Validate access requests against least‑privilege and segregation‑of‑duties principles.
• Write technical and user documentation, including UML models.
• Monitor IAM platform health and proactively identify risks.
• Assist users with access and system requests following security standards.

Required profile

• 2+ years of experience in IAM, identity operations, or security engineering.
• Solid understanding of IAM architecture concepts, SSO, MFA, provisioning, and directory services.
• Strong troubleshooting and log‑analysis skills, with ability to communicate clearly with business users.
• Ability to work independently on technical incidents.
• Intermediate or higher English (B1+) and strong command of Russian.

Required skills

• Keycloak
• Adaxes
• Google Workspace (GWS)
• SAML 2.0, OAuth 2.0, OpenID Connect
• RBAC configuration and provisioning workflows
• Python scripting
• PowerShell scripting
• Bash scripting

What we offer

• Private health insurance
• Sports benefits
• Comprehensive mental health program
• Free English lessons (online) and local language courses
• Paid time off and maternity leave support
• Referral program rewards
• Upskilling through internal workshops and professional conferences