Design Engineer (IAM)

Technologies we use

• Kubernetes
• Service Mesh
• DevSecOps

About the project

You’ll act as a technical authority within the IAM Transformation Programme, shaping high level (HLD) and low level (LLD) designs, defining target architectures, and guiding delivery teams to build reliable and compliant identity solutions.

Partnering with architects, product owners, and engineers, you’ll translate strategic security, regulatory, and business needs into secure, cloud native identity controls built for scale and resilience.

Sounds like your kind of challenge?

This is how we organize our work

• at the client's site
• agile
• scrum

Your responsibilities

• Produce High Level (HLD) and Low Level (LLD) architecture documents for IAM capabilities.
• Define end to end technical solutions spanning application, data, and infrastructure domains.
• Translate complex business, security, and regulatory requirements into practical, supportable designs.
• Develop reference architectures, patterns, and reusable standards for IAM services.
• Design secure integration between identity platforms, applications, and infrastructure layers.
• Create cloud native solutions leveraging GCP and Kubernetes, including service mesh design.
• Develop authentication, authorisation, and federation models (OIDC, OAuth2, SAML, SCIM).
• Implement Agent Identity, Human Identity, and Workload Identity capabilities.
• Define Zero Trust architectures and establish trust boundary controls.
• Design API security and service to service authentication patterns.
• Develop event driven integration architectures using messaging and asynchronous processing.
• Define and implement Policy Decision Point (PDP) and Policy Enforcement Point (PEP) frameworks using Policy as Code (OPA/Cedar).
• Create PKI, certificate management, and secret handling integration patterns.
• Design for resilience, HA, and disaster recovery scenarios.
• Produce Architecture Decision Records (ADRs) and govern design consistency through Architecture Review Boards and Design Authorities.
• Perform solution assurance and design reviews across vendor and in house deliveries.
• Identify technical risks, assumptions, and dependencies early in the lifecycle.
• Align architecture with enterprise strategy in collaboration with senior architects.
• Support engineering delivery, testing, and readiness for production stages.
• Mentor engineers and promote best practices across design teams.
• Evaluate emerging technologies and vendor products for alignment with IAM objectives.
• Contribute to programme roadmap and future state architecture planning.
• Note: Detailed project information will be shared during the recruitment process.

Our requirements

• Enterprise Architecture and Security Architecture expertise.
• Deep knowledge of Identity and Access Management (IAM) design and operations.
• Proven experience with Authentication and Authorisation models.
• Hands on knowledge of Zero Trust Architectures.
• Understanding of Human, Agent, and Workload Identity solutions.
• Experience with Identity Federation protocols: OIDC, OAuth2, SAML, SCIM.
• Experience building Cloud Architectures on GCP or similar platforms.
• Proficient with Kubernetes, Service Mesh, and containerised designs.
• Strong background in API Architecture and Security implementation.
• Experience with Event Driven Architecture models.
• Knowledge of Policy as Code frameworks (OPA / Cedar).
• Expertise in PKI, Certificates, and Secret Management.
• Exposure to DevSecOps and CI/CD environments.
• Proven capability in designing for High Availability, Resilience, and Scalability.
• Experience overseeing Architecture Governance and Design Review Processes.
• Strong stakeholder engagement, communication, and technical leadership skills.

What we offer

• Hybrid work setup: 6 days per month in the office in Kraków, with remote days available depending on the client’s arrangements
• Collaborative team culture: work alongside experienced professionals eager to share knowledge
• Continuous development: access to training platforms and growth opportunities
• Comprehensive benefits, including Interpolska Health Care, Multisport card, Warta Insurance, and more
• High quality equipment: laptop and essential software provided

This is how we work on a project

• Continuous Deployment
• Continuous Integration

Benefits

• sharing the costs of sports activities
• private medical care
• sharing the costs of professional training & courses
• life insurance

Joining this project you’ll become part of Mindbox, a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference.

At Mindbox, we connect top IT talents with technology projects for leading enterprises across Europe.

Our focus is on matching your skills with work that matters: projects that use modern tech stacks, solve real business challenges, and give you space to grow. By joining us, you’ll deliver technology solutions for well-known brands, supported by the Mindbox team that values knowledge-sharing and continuous development. We make sure you have the tools, flexibility, and guidance to do your best work and to keep moving forward in your career.