Senior IAM Engineer

Join ABBYY and be part of a team that celebrates your unique work style. With flexible work options, a supportive team, and rewards that reflect your value, you can focus on what matters most – driving your growth, while fueling ours.

Our commitment to respect, transparency, and simplicity means you can trust us to always choose to do the right thing.

As a trusted partner for purpose-built AI and intelligent automation, we solve highly complex problems for our enterprise customers and put their information to work to transform the way they do business. Over 10,000 customers trust ABBYY, including many Fortune 500 ones. You will work on further developing a portfolio already containing client names such as DHL, Johnson & Johnson, FDA, DMV, PwC, KeyBank, Spotify, and H&R BLOCK.

We are seeking a Senior Identity and Access Management (IAM) Engineer to join our Information Security department. In this role, you’ll help shape and strengthen our identity architecture, access controls, and governance across a modern, cloud-centric environment. You will take ownership of the enterprise IAM platform and be a key player in delivering secure, scalable, and compliant identity solutions.

This is a hands-on, technical leadership role focused on building automation, ensuring policy alignment with Zero Trust principles, and supporting the organization's broader security goals.

Job Responsibilities:

IAM Architecture & Engineering

• Design and maintain IAM solutions using Microsoft Entra ID, including identity federation, Conditional Access, MFA, passwordless authentication, and Identity Governance.
• Define and implement scalable access strategies like RBAC, Least Privilege, JIT Access, and dynamic group management.
• Collaborate with Security Architects to evolve our IAM infrastructure as part of a modern Zero Trust and cloud-first security strategy.

Lifecycle & Automation

• Own and automate the joiner-mover-leaver (JML) lifecycle across SaaS and on-prem systems.
• Build and maintain integrations and workflows for access provisioning, de-provisioning, and certification.
• Develop access review processes and ensure alignment with audit, risk, and compliance requirements.

Security & Governance

• Ensure IAM practices meet compliance requirements (e.g., SOC 2, ISO 27001, GDPR).
• Respond to access-related security incidents and lead remediation efforts.
• Collaborate cross-functionally with GRC, HR, and IT to align IAM operations with corporate security policies.

Team Contribution & Mentorship

• Act as a senior contributor and subject matter expert within the Security Engineering team.
• Develop clear documentation including SOPs, runbooks, and architectural diagrams.
• Mentor junior engineers and provide guidance on IAM standards and operational excellence.

Job Requirements:

• 4–6+ years of experience in IAM, preferably within software or technology-driven organizations.
• Deep experience with Microsoft Entra ID / Azure AD, including:
  • Conditional Access and Identity Protection
  • Enterprise SSO for SaaS applications
  • MFA and passwordless strategies
  • Access Reviews and Entitlement Management
• Familiarity with authentication protocols: OAuth2, OIDC, SAML, LDAP.
• Experience with PowerShell or similar scripting languages for automation.
• Working knowledge of cloud security concepts and Zero Trust

Preferred:

• Experience with Microsoft 365, Intune, or integration with Microsoft Sentinel/Defender.
• Hands-on experience with Privileged Identity Management (PIM).
• Relevant certifications such as Microsoft Identity and Access Administrator Associate, CISSP, or GIAC.
• Exposure to B2B/B2C IAM flows and API security patterns.

Soft Skills

• Strong communicator with the ability to influence security outcomes across teams.
• Proactive, detail-oriented, and capable of leading initiatives independently.
• Strong analytical and problem-solving mindset with a passion for automation and security engineering.

Here are some of our local benefits:

• Work from home, remotely, or hybrid
• Partial compensation for glasses and lenses
• Private health insurance
• Volunteering Time Off (2 days/ year)
• SZÉP Card for recreational activities
• 3 extra days/ month for 'sick leave' without doctors visit
• Flexible working hours