IAM Architect (EPAM SISTEMOS, UAB)

Job description:
We are seeking an experienced IAM Architect to design, implement and continuously improve identity and access management solutions that protect enterprise systems while enabling secure, efficient access across the organization. The ideal candidate combines deep IAM expertise with a forward-thinking approach to automation and AI-assisted security operations.
_This position offers hybrid setup with the flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas._
Plan, design and implement security architectures and controls for Identity and Access Management systems
Gather business, functional and non-functional requirements, including compliance and regulatory requirements, to design IAM solutions for new implementations, migrations and security posture improvements
Design and improve core IAM capabilities, including user lifecycle management, provisioning/deprovisioning, SSO, federation, MFA/passwordless authentication, privileged access, access reviews and role-based access models
Implement and maintain IAM integrations with cloud platforms, SaaS applications, enterprise systems, directories, databases and APIs
Collaborate with engineering, infrastructure, development, database, security operations, compliance and architecture teams on physical and logical system design
Support development and improvement of corporate identity security standards, access control models and IAM governance processes
Design and implement IAM-related monitoring, resilience, backup and disaster recovery strategies
Develop and maintain automation scripts, workflows and IAM tooling using PowerShell, Python, REST APIs, SCIM or Terraform
Use AI-powered tools and agentic workflows to automate and improve daily IAM activities, such as access request classification and routing, entitlement analysis, access review support, policy and role model analysis, user lifecycle and provisioning workflow optimization, privileged access review support, compliance evidence collection and IAM documentation and runbook automation
Design or integrate AI agents and AI-assisted automations for IAM processes where appropriate, while ensuring proper security, privacy, auditability and human-in-the-loop controls
Report IAM risks, project status and remediation plans to security leadership and relevant stakeholders
Requirements:
Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience
3+ years of security experience within the Identity and Access Management domain, with at least one successfully delivered IAM implementation, migration or modernization project
Hands-on experience with at least one enterprise IAM, IGA, PAM or federation platform
Understanding of IAM concepts, including identity lifecycle, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege and privileged access
Knowledge of common IAM protocols and standards, such as SAML, OAuth…