IAM Security Expert

About the role

Join If's Integration Security squad to help development teams implement secure authentication, authorization, and identity integrations. You will review architecture, source code, and security configuration, identify weaknesses, and recommend practical improvements. The role focuses on security assessments and technical guidance rather than daily application development.

Key responsibilities

• Review solution architecture, source code, identity configuration, and gateway settings against IAM security requirements.
• Perform white‑box IAM‑focused security testing of web, native applications, and APIs, covering user and system‑to‑system flows.
• Assess how applications, APIs, gateways, and identity platforms establish trust and enforce authentication and authorization.
• Document findings with evidence, explain impact, recommend corrective actions, and verify fixes with development teams.
• Provide technical guidance on secure identity integrations and implementation of IAM security requirements.
• Assess central identity platforms and help define and validate security improvements.
• Contribute to security guidelines, assessment checks, reference implementations, and automation to improve assessment quality.
• Support security approval decisions with clear assessment results, unresolved issues, and remaining risks.

Required profile

• Experience identifying security weaknesses through source‑code reviews and practical testing of applications or APIs.
• Ability to assess security behavior in C#/.NET applications, including configuration, middleware, and libraries.
• Practical knowledge of OAuth 2.0, OpenID Connect, JSON Web Tokens, and single sign‑on.
• Understanding of authentication, authorization, token handling, session management, logout, and related web security controls.
• Strong troubleshooting skills: following HTTP traces, analyzing logs, and linking observed behavior to code and configuration.
• Investigative mindset with judgment to distinguish confirmed weaknesses, unmet requirements, recommendations, and missing evidence.
• Ability to explain technical findings clearly, support conclusions with evidence, and work with developers on practical fixes.
• Excellent Latvian and English language skills for daily communication.

Required skills

• C#/.NET
• OAuth 2.0
• OpenID Connect
• JSON Web Tokens (JWT)
• Single Sign‑On (SSO)
• Curity
• Microsoft Entra ID
• Azure API Management
• HTTP tracing and log analysis

What we offer

• Monthly salary €5,500 – €7,500 gross, depending on qualifications.
• Strong company culture with knowledge sharing, events, and inspiring speakers.
• Career and development opportunities, including three dedicated up‑skilling days.
• Challenging projects with autonomy to plan own tasks.
• Extra vacation days, annual bonus, comprehensive insurance benefits, and product discounts for you and your family.
• Hybrid work model with office as primary workplace.
• Recently renovated office in Riga centre with a 24/7 gym.