IAM Engineer

Antal BYDGOSZCZ 2026-09-22
  • 3–5+ years of experience in Identity & Access Management or Identity Infrastructure.
  • Hands-on experience administering Enterprise Public Key Infrastructure (PKI).
  • Strong knowledge of Microsoft Active Directory (AD DS, GPO, LDAP, Kerberos).
  • Experience with Microsoft Entra ID (Azure AD), including SSO, Conditional Access, and Identity Governance.
  • Practical experience with Active Directory Certificate Services (AD CS).
  • Strong understanding of X.509 certificates, SSL/TLS, client certificates, and code signing.
  • Experience managing CRL, OCSP, certificate auto-enrollment, and certificate lifecycle management.
  • Experience integrating PKI with Intune, MDM platforms, VPN, Wi-Fi (802.1X), enterprise applications, and authentication protocols such as SAML, OIDC, and mTLS.
  • PowerShell scripting experience, particularly for AD and PKI administration.
  • Basic knowledge of APIs and process automation.
  • Understanding of security frameworks such as ISO 27001, NIST, and Zero Trust architecture.
  • Good understanding of security risks related to Identity and PKI technologies.

Soft Skills

  • Strong analytical and problem-solving abilities.
  • Excellent communication skills with both technical and non-technical stakeholders.
  • Ability to work effectively in an international, cross-functional environment.
  • Self-driven, proactive approach with strong ownership.
  • High attention to quality and security.
  • Experience working within Agile and/or DevOps environments.

Nice to Have

  • Experience with ITSM platforms such as ServiceNow.
  • Knowledge of Azure DevOps or similar documentation platforms.
  • Experience with identity automation and scripting.
  • Familiarity with modern authentication technologies and passwordless solutions.

IAM Engineer (PKI & Identity Infrastructure)


About the role


We are looking for an experienced IAM Engineer specializing in Public Key Infrastructure (PKI) and Identity Infrastructure to join a global IT organization. In this role, you will be responsible for designing, implementing, and maintaining enterprise PKI services while integrating certificate-based authentication with modern identity platforms and security solutions.


Working closely with Infrastructure, Security, Endpoint, and Networking teams, you will help deliver secure identity services that support a modern Zero Trust environment.



What You'll Do


You will play a key role in strengthening enterprise identity security by delivering scalable PKI solutions, supporting secure authentication, and contributing to the organization's Zero Trust strategy while working within a global technology environment.

,[Design, implement, and maintain enterprise PKI infrastructure, including Certificate Authorities (CA), subordinate CAs, and trust chains., Manage the complete certificate lifecycle, including issuance, renewal, revocation, and monitoring., Integrate PKI services with Microsoft Active Directory, Microsoft Entra ID, Intune, endpoint devices, and enterprise applications., Maintain and enhance certificate auto-enrollment and certificate-based authentication services., Support Zero Trust initiatives, including passwordless authentication and device trust., Configure and maintain CRL, OCSP, and other PKI security mechanisms., Troubleshoot and resolve incidents related to identity, authentication, and digital certificates., Develop and maintain technical documentation, operational procedures, and knowledge base articles., Collaborate with cross-functional teams including Information Security, Endpoint Management, Networking, and Infrastructure., Contribute to automation and continuous improvement of IAM and PKI processes.] Requirements: Enterprise Public Key Infrastructure, Microsoft Active Directory, Microsoft Entra ID, SSO, Conditional Access, Identity Governance, Active Directory Certificate Services, AD CS, X.509 certificates, SSL/TLS, CRL, OCSP, PKI, MDM, VPN, Wi-Fi, SAML, OIDC, mTLS, PowerShell, API, ISO 27001, NIST, Zero Trust Architecture, Security risk, Analytical skills, Problem-Solving, Communication skills, Agile, DevOps, ITSM, ServiceNow, Azure DevOps, Identity automation, Scripting
APLIKUJ