IAM DevOps Engineer (Security Engineering Team)

Join our team as an IAM DevOps Engineer and help us build, automate, and operate critical identity services in a hybrid enterprise environment. This role is for an engineer who is equally comfortable with identity technologies, infrastructure, automation, and cloud migration.

You will join a Pan-Baltic security engineering environment where Identity & Access Management is not limited to user lifecycle activities. Our team is responsible for the platforms and infrastructure behind key IAM capabilities, including SSO, MFA, PAM, access governance, and the supporting directory and cloud components that keep these services reliable and secure.

• →

  Design, deploy, automate, and maintain IAM platforms and supporting infrastructure.

• →

  Support and improve services related to single sign-on, multi-factor authentication, privileged access management, and identity governance.

• →

  Manage IAM capabilities across AWS, Microsoft Entra ID/Azure AD, and on-premises Active Directory environments.

• →

  Contribute to the migration of IAM-related infrastructure from on-premises environments to the cloud.

• →

  Build and maintain infrastructure using Terraform/Infrastructure as Code and modern CI/CD practices.

• →

  Work with containers and orchestration technologies where relevant to IAM platform delivery.

• →

  Apply SRE-minded engineering practices such as observability, incident response, service reliability, and performance monitoring.

• →

  Troubleshoot complex authentication, authorization, and directory-related issues in a production environment.

• →

  Collaborate with security, platform, and application stakeholders across the organization.

• →

  Maintain clear and accurate technical documentation.

This is not a junior IAM operations role. We are looking for a self-sufficient engineer who can independently own and deliver complex technical tasks. You will work on meaningful identity and security engineering challenges in a modern hybrid environment, with an opportunity to shape the automation, reliability, and future-state architecture of core IAM services across the organization.

Required experience and skills:

• Strong hands-on experience with IAM technologies, such as SSO, MFA, PAM, and identity-related access controls.

• Solid practical experience with Active Directory administration in enterprise environments, including core directory services, policies, and troubleshooting.

• Experience working in cloud environments, ideally with both AWS and Microsoft Entra ID/Azure AD.

• Experience with Infrastructure as Code, especially Terraform (ArgoCD, Terragrunt is a plus).

• Experience with Kubernetes, Docker, or similar container platforms.

• Experience with infrastructure monitoring with Grafana, Prometheus, Zabbix, or similar.

• Experience with automation, scripting, and engineering tools such as Python, PowerShell, or similar.

• Solid practical experience with CI/CD tooling and secure software delivery practices.

• Understanding of networking fundamentals and their impact on authentication and access flows.

• Experience with incident handling, service troubleshooting, and operational support in production environments.

• Strong problem-solving ability and clear communication skills in English.

Important:

• DevOps and automation skills are mandatory for this role.

• Participation in an on-call rotation is required.