AI-Augmented IAM Security Engineer

We are seeking an AI-Augmented IAM Security Engineer to drive hands-on implementation, configuration, automation, and day-to-day operation of enterprise Identity and Access Management.
This is a delivery-and-operations role that works within the designs, standards, role models, and policies set by IAM architects and security leadership. The focus is on building, configuring, scripting, running, and troubleshooting IAM, not defining target-state architecture, role models, or governance policy.
This is a fully remote position that offers you the flexibility to work from any location in Armenia, whether it's your home or well-equipped offices in Yerevan or Gyumri.
Responsibilities
Implement, configure, and operate IAM solutions and controls based on architecture, standards, and designs defined by IAM architects and security leadership
Build and maintain identity lifecycle (Joiner / Mover / Leaver) processes, including automated provisioning and deprovisioning across target systems
Configure and maintain core IAM capabilities, including SSO, federation, MFA and passwordless authentication, conditional access, RBAC/ABAC role models, and least-privilege access
Develop, deploy, and maintain IAM integrations and connectors with cloud platforms, SaaS applications, enterprise systems, directories, authoritative source systems, databases, and APIs
Execute access certification and review campaigns, perform entitlement clean-up, and configure segregation-of-duties (SoD) rules according to access policies defined by architects and the business
Operate Privileged Access Management controls, including credential vaulting, secrets rotation, session management, and just-in-time and just-enough access
Develop and maintain automation scripts, workflows, and IAM tooling using PowerShell, Python, REST APIs, SCIM, Terraform, or similar technologies
Monitor IAM platform health, troubleshoot and resolve incidents and access issues, and perform patching, upgrades, and configuration hardening
Maintain IAM logging, alerting, and monitoring, and run backup and recovery procedures according to defined runbooks and resilience requirements
Build, deploy, and maintain AI-assisted automations and agentic workflows that reduce manual effort across daily IAM operations, including access request triage, entitlement analysis, anomaly detection, provisioning troubleshooting, privileged access review support, compliance evidence collection, and runbook generation
Integrate AI agents and LLM-backed automations into IAM systems and operational pipelines, connecting models to internal tools, APIs, directories, ticketing, and IAM platforms via function calling, SCIM, REST, and webhooks
Design, test, and maintain reusable prompts, structured-prompting patterns, and prompt templates for recurring IAM tasks, tuning them for accuracy, consistency, and safe behavior
Deploy retrieval over IAM policies, role catalogs, runbooks, and documentation (for example RAG), and implement output verification, human-in-the-loop approval gates, rollback paths, and security and privacy controls for IAM AI usage
Track AI-assisted IAM automations in production, measure their accuracy and impact, and continuously tune prompts, tools, and workflows based on results and feedback
Produce and maintain operational documentation, runbooks, and standard operating procedures, and support audits and compliance evidence requests
Requirements
Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience
2+ years of hands-on experience implementing or operating Identity and Access Management solutions, with hands-on experience in at least one enterprise IAM, IGA, PAM, or federation platform
Understanding of IAM concepts, including identity lifecycle, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege, and privileged access
Knowledge of common IAM protocols and standards, such as SAML, OAuth 2.0, and OpenID Connect, as well as SCIM, LDAP, and Kerberos
Expertise in configuring IAM controls, policies, connectors, and access governance workflows
Familiarity with cloud IAM concepts across at least one major cloud platform such as Azure, AWS, or GCP
Skills in scripting and automation using at least one of PowerShell, Python, or Bash, along with REST APIs, SCIM, or Terraform
Capability to work closely with developers, architects, infrastructure engineers, security operations, compliance teams, and business stakeholders, and to follow, maintain, and improve defined IAM and security processes
Comfortable executing changes from tickets, runbooks, and designs provided by senior engineers and architects, and escalating design-level questions rather than owning them
Practical understanding of AI-assisted productivity and automation beyond basic chatbot usage, including building or configuring AI agents, automating repetitive IAM or security tasks, integrating LLMs with tools, APIs, and workflows, prompt engineering, and secure use of AI tools with awareness of sensitive identity data
Strong communication skills and the ability to explain IAM issues, technical decisions, and remediation steps to both technical and non-technical stakeholders
English proficiency at an Upper-Intermediate level (B2) or higher
Nice to have
Background in IAM platforms such as Microsoft Entra ID, Active Directory, or Okta, as well as Ping Identity, ForgeRock, Auth0, SailPoint, Saviynt, or CyberArk
Experience with CIAM, B2B/B2C identity, customer identity, external identity, or partner access scenarios, along with SIEM/SOAR integrations for IAM monitoring, alerting, and automated response
Proficiency in CI/CD-based IAM deployment, configuration-as-code, and automated testing of IAM changes
Familiarity with AI/LLM platforms or frameworks such as Azure OpenAI, Amazon Bedrock, or Microsoft Copilot Studio, as well as LangChain, AutoGen, or Power Automate, and understanding of AI security risks, including data leakage, prompt injection, and excessive agency
Security or IAM certifications such as SC-300, Okta Certified Professional/Administrator/Consultant, SailPoint, Saviynt, CyberArk, or Ping Identity certifications, CISSP, CISM, CISA, CCSK, CCSP, SSCP, or AI-related certifications like AI-900 or AWS Certified AI Practitioner
We offer
We connect like-minded people
Delivering innovative solutions to industry leaders, making a global impact
Enjoyable working environment, whether it is the vibrant office or the comfort of your home
Opportunity to work abroad for up to two months per year
Relocation opportunities within our offices in 55+ countries
Corporate and social events
We invest in your growth
Leadership development, career advising, soft skills and well-being programs
Certifications, including GCP, Azure and AWS
Unlimited access to EPAM's internal learning database
Free English classes with certified teachers
We cover it all
Participation in the Employee Stock Purchase Plan
Monetary bonuses for engaging in the referral program
Comprehensive medical & family care package
Four trust days per year for personal needs
Discounts for fitness clubs
Benefits package (hotels, restaurants, stores and services)
EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.

Work arrangement
Yes