IAM Security Operations Engineer – Middle
SOFTSWISS is looking for an IAM Security Operations Engineer to maintain and troubleshoot IAM services, manage identity lifecycle processes (JML), and ensure secure, role-based access across its systems.
The role involves handling complex and non-standard JML scenarios, performing technical troubleshooting of IAM services, and configuring and maintaining the Adaxes automation tool. The engineer will implement changes in IAM services and integrations, process JML access requests in alignment with approved RBAC models, and automate repetitive access management tasks. Validation of access requests against least privilege and segregation of duties principles is also a key responsibility, alongside writing technical and user documentation and monitoring IAM platform health to proactively identify risks. Assistance with user access and system requests in alignment with security standards and procedures will be provided.
- Handle complex and non-standard JML scenarios.
- Perform technical troubleshooting of IAM services (SSO, IdP, provisioning flows), including Keycloak.
- Configure and maintain Adaxes automation tool: automation rules, approval-based workflows, role-based permissions, etc.
- Implement changes in IAM services and integrations (Keycloak, Adaxes, etc).
- Process Joiner/Mover/Leaver (JML) access requests in alignment with approved RBAC models.
- Automate repetitive access management tasks.
- Validate access requests against least privilege and segregation of duties principles.
- Write technical and user documentation, including models (e.g., UML).
- Monitor IAM platform health and proactively identify risks.
- Assist users with access and system requests in alignment with Security standards and procedures.
- 2+ years in IAM, identity operations, or security engineering roles (required)
- Experience in maintaining and troubleshooting IAM – related services (Keycloak, Adaxes, GWS) (required)
- Experience maintaining secure IAM integrations using APIs and federation protocols (SAML 2.0, OAuth 2.0, OpenID Connect) (required)
- Hands-on experience with RBAC configuration and provisioning workflows (required)
- Solid understanding of IAM architecture concepts (required)
- Working knowledge of SSO, MFA, provisioning, and directory services (required)
- Understanding of identity-related security risks (required)
- Strong troubleshooting and log analysis skills (required)
- Understanding of identity protocols (SAML, OAuth, OIDC – operational level) (required)
- Ability to communicate clearly with business users (required)
- Ability to work independently on technical incidents (required)
- Scripting or automation capability (e.g., Python, PowerShell, Bash) (required)
- Intermediate or higher English (B1+) and strong command of Russian (required)
- Private health insurance
- Sports benefits
- Comprehensive Mental Health Program
- Free English lessons (online)
- Local language courses
- Paid time off
- Maternity leave support
- Referral program rewards
- Upskilling, internal workshops, and participation in professional conferences and corporate events
SOFTSWISS is a global tech expert with over 15 years of experience in providing innovative iGaming solutions. The company offers comprehensive software for online casinos, sports betting, and affiliate management. To expand its global presence, in 2024, SOFTSWISS acquired Turfsport, a leading South African betting software provider, and a significant stake in Ously Games GmbH, the company behind the fastest-growing European social casino, SpinArena.net. Additionally, the company appointed Formula 1 legend Rubens Barrichello as Non-Executive Director in Latin America, focusing on Brazil's growing market. SOFTSWISS is committed to transforming the iGaming and entertainment industry for the better through tech innovations. The Team helps operators and providers establish enduring partnerships by building profitable and scalable businesses.