AI-Augmented IAM Security Engineer

About the role

We are looking for an AI‑Augmented IAM Security Engineer to implement, configure, automate and operate enterprise Identity and Access Management solutions. The role focuses on hands‑on delivery within the standards and designs defined by IAM architects and security leadership.

Key responsibilities

• Implement, configure and operate IAM solutions, including SSO, federation, MFA, passwordless authentication and conditional access.
• Build and maintain automated identity lifecycle processes (joiner/mover/leaver) across target systems.
• Develop and maintain integrations with cloud platforms, SaaS applications, directories, databases and APIs using PowerShell, Python, REST, SCIM or Terraform.
• Execute access certification campaigns, entitlement clean‑up and segregation‑of‑duties rule configuration.
• Operate Privileged Access Management controls such as credential vaulting, secrets rotation and just‑in‑time access.
• Monitor IAM platform health, troubleshoot incidents, apply patches and perform configuration hardening.
• Design, test and maintain AI‑assisted automations, LLM‑backed agents and prompt templates to reduce manual effort.
• Track AI‑driven automations in production, measure accuracy and continuously tune workflows.

Required profile

• Bachelor's degree in Computer Science, Cybersecurity, Engineering or equivalent practical experience.
• 2+ years of hands‑on experience with enterprise IAM, IGA or PAM solutions.
• Strong understanding of IAM concepts (identity lifecycle, authentication, authorization, RBAC/ABAC, least privilege).
• Experience working with cloud IAM on at least one major platform (Azure, AWS or GCP).
• Ability to follow defined processes, execute changes from tickets and collaborate with cross‑functional teams.

Required skills

• PowerShell, Python or Bash scripting.
• REST APIs, SCIM, Terraform.
• IAM protocols and standards: SAML, OAuth 2.0, OpenID Connect, LDAP, Kerberos.
• Configuration of SSO, MFA, passwordless authentication and conditional access.
• Privileged Access Management tools and concepts.
• AI/LLM integration basics, prompt engineering and secure use of AI tools.

What we offer

• Remote work from anywhere in Kyrgyzstan with a modern office in Bishkek.
• Opportunities for international travel and relocation within 55+ countries.
• Professional development programs, certifications and unlimited access to internal learning resources.
• Medical and family care package, fitness discounts and mental‑health support.
• Referral bonuses, trust days and competitive benefits package.