IAM Security Engineer

About the role

Luminor, the leading independent bank in the Baltics, is looking for an IAM Security Engineer to join its Security Engineering team. The role builds, automates and continuously improves the identity services that protect access to critical systems across the bank, working with identity technologies, automation, cloud platforms and modern infrastructure.

Key responsibilities

• Design, implement and maintain Identity & Access Management (IAM) solutions in cloud and on-premise environments
• Configure and enhance identity services such as SSO, MFA and access governance
• Manage and improve IAM across AWS IAM, Microsoft Entra ID and Active Directory
• Automate identity lifecycle and access management with scripting, Infrastructure as Code and DevOps practices
• Implement role-based access controls, policies and permissions aligned with business and security needs
• Monitor IAM platforms, troubleshoot authentication and authorization issues and support incident investigations
• Work with cloud, infrastructure, security and application teams, and contribute to IAM governance, security controls and compliance

Required profile

• 5+ years of experience in IAM, security engineering, infrastructure engineering or a similar technical role
• Fluent English, spoken and written, as the role is Pan-Baltic level
• Ability to work independently, take ownership and collaborate across technical and business teams
• Primarily candidates already located within the Baltics; applications close on 30 November

Required skills

• Hands-on experience with SSO, MFA, IAM, IGA or PAM solutions
• Understanding of OAuth, SAML, OIDC, LDAP and role-based access control
• Experience with Microsoft Entra ID/Azure AD, Active Directory and/or AWS IAM
• Automation and scripting with PowerShell, Python, Java or similar
• Cloud environments and modern infrastructure practices
• Advantageous: SailPoint, CyberArk, Okta, Ping Identity, ForgeRock, Oracle IAM, CI/CD, DevOps, GDPR/DORA/PSD2/ISO 27001/NIST knowledge, banking experience, and AWS, Microsoft, IAM, PAM, CISSP or CISM certification

What we offer

• Gross salary of 3,700-5,900 EUR per month, depending on experience and competencies
• Flexible hours, hybrid work and the option to work from anywhere in the EU, Iceland, Switzerland and the UK (up to 90 days per year)
• Additional vacation weeks for employees with 1+ year of service, volunteer time off, and 30 paid days for military training
• Health insurance after 3 months in all three Baltic states, health days, wellbeing tools and professional growth programmes