About the role

SOFTSWISS is looking for an IAM Security Operations Engineer to maintain and troubleshoot IAM services, manage identity lifecycle processes (JML), and ensure secure, role-based access across our systems.

Handle complex and non-standard JML scenarios

Perform technical troubleshooting of IAM services (SSO, IdP, provisioning flows), including Keycloak

Configure and maintain Adaxes automation tool: automation rules, approval-based workflows, role-based permissions, etc

Implement changes in IAM services and integrations (Keycloak, Adaxes,etc)

Process Joiner/Mover/Leaver (JML) access requests in alignment with approved RBAC models

Automate repetitive access management tasks

Validate access requests against least privilege and segregation of duties principles

Write technical and user documentation, including models (e.g., UML)

Monitor IAM platform health and proactively identify risks

Assist users with access and system requests in alignment with Security standards and procedures

Required Experience

2+ years in IAM, identity operations, or security engineering roles

Experience in maintaining and troubleshooting IAM - related services (Keycloak, Adaxes, GWS)

Experience maintaining secure IAM integrations using APIs and federation protocols (SAML 2.0, OAuth 2.0, OpenID Connect)

Hands-on experience with RBAC configuration and provisioning workflows

Solid understanding of IAM architecture concepts

Working knowledge of SSO, MFA, provisioning, and directory services

Strong troubleshooting and log analysis skills

Understanding of identity protocols (SAML, OAuth, OIDC – operational level)

Ability to work independently on technical incidents

Scripting or automation capability (e.g., Python, PowerShell, Bash)

Intermediate or higher English (B1+) and strong command of Russian

Referral program rewards

Upskilling, internal workshops, and participation in professional conferences and corporate events

From SOFTSWISS’s original posting ↗.

Before you apply. Check the location rules in the full posting: many remote roles are open only to people in certain countries or US states, and some need occasional travel. Listings are sourced from each company’s own careers site and updated daily. Apply on the company site. How to spot a fake job · Report this listing

Get ready

Many large employers use online aptitude tests. Check your job readiness: start with the free 10-question warm-up. Check the posting or your recruiter email for the test the company actually uses.
Want a second pair of eyes? Get a resume review.

IAM Security Operations Engineer – Middle