Identity Engineer at ELEKS

ABOUT THE PROJECT

ELEKS is looking for an experienced Identity Engineer to join a long-term project for one of our large enterprise clients (a major global SaaS provider). The role involves building, automating, and operating identity and access management services across large-scale hybrid infrastructure environments.
You will work on the core access-control system used by engineering and operations teams to securely access VMs, containers, databases, networking components, and other production systems. The position focuses on identity lifecycle automation, AD-based access control, policy enforcement, and integration with corporate identity providers in complex hybrid cloud ecosystems. This is a hands-on engineering position within a highly technical, security-driven environment.

REQUIREMENTS

– Bachelor’s degree in Computer Science, Electrical Engineering, Information Systems, Informatics or an equivalent field (Master’s degree is a plus).
– 5+ years of development experience with a strong focus on identity and access management systems.
– Extensive hands-on experience with Active Directory, including: Domain controller maintenance, GPO configuration and management, AD deployment and replication, Role-Based Access Control (RBAC) for users and groups.
– Strong understanding of DNS and core networking concepts.
– Proficiency in PowerShell for automation and scripting within identity environments.
– Experience with programming and automation tools such as C#, .NET, Ansible, Python, Java, Go, Node.js, Terraform, Docker.
– Proven track record of designing scalable, maintainable, and secure systems, with a strong emphasis on automating identity workflows.
– Understanding of large-scale infrastructure, including load balancing, hybrid/cloud environments, and certificate infrastructure.
– Experience integrating with Entra ID or similar identity platforms.
– Experience developing software for hybrid cloud or mixed on-prem/cloud environments.
– Ability to work effectively with security, compliance, and cross-functional teams, and communicate clearly with both technical and non-technical stakeholders.
– Experience working with multiple vendors in the IAM ecosystem and supporting hybrid Active Directory + Entra ID environments.
– Experience with Terraform, Bicep, or ARM templates for infrastructure configuration.
– Knowledge of identity protocols such as Kerberos, LDAP(S), SAML, OIDC, and OAuth.

RESPONSIBILITIES

– Design, develop, automate, and operate services and systems that manage identities across private and public cloud environments.
– Implement identity capabilities such as JIT, JML, PIM, PAM, and RBAC in a scalable and robust manner.
– Collaborate with engineering, security, and compliance teams to build tooling, ensuring all access activities are logged and fully auditable.
– Continuously assess industry trends and incorporate relevant tools and technologies.
– Mentor junior engineers and support their technical development.
– Participate in an on-call rotation.

WHAT WE OFFER

– Close cooperation with a customer
– Challenging tasks
– Competence development
– Ability to influence project technologies
– Team of professionals
– Dynamic environment with low level of bureaucracy

COMPENSATION & BENEFITS

–