Design Engineer (IAM)

Project overview

At Mindbox we connect top IT talents with technology projects for leading enterprises across Europe.

Join our Client's team as a Design Engineer (IAM)!

You’ll act as a technical authority within the IAM Transformation Programme — shaping high‑level (HLD) and low‑level (LLD) designs, defining target architectures, and guiding delivery teams to build reliable and compliant identity solutions.

Partnering with architects, product owners, and engineers, you’ll translate strategic security, regulatory, and business needs into secure, cloud‑native identity controls built for scale and resilience.

Sounds like your kind of challenge?

What you get in return

Joining this project you’ll become part of Mindbox – a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference.

• Hybrid work setup – 6 days per month in the office in Kraków
• remote days available depending on the client’s arrangements
• Collaborative team culture – work alongside experienced professionals eager to share knowledge
• Continuous development – access to training platforms and growth opportunities
• Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more
• High quality equipment – laptop and essential software provided
• Produce High‑Level (HLD) and Low‑Level (LLD) architecture documents for IAM capabilities.
• Define end‑to‑end technical solutions spanning application, data, and infrastructure domains.
• Translate complex business, security, and regulatory requirements into practical, supportable designs.
• Develop reference architectures, patterns, and reusable standards for IAM services.
• Design secure integration between identity platforms, applications, and infrastructure layers.
• Create cloud‑native solutions leveraging GCP and Kubernetes, including service mesh design.
• Develop authentication, authorisation, and federation models (OIDC, OAuth2, SAML, SCIM).
• Implement Agent Identity, Human Identity, and Workload Identity capabilities.
• Define Zero Trust architectures and establish trust‑boundary controls.
• Design API security and service‑to‑service authentication patterns.
• Develop event‑driven integration architectures using messaging and asynchronous processing.
• Define and implement Policy Decision Point (PDP) and Policy Enforcement Point (PEP) frameworks using Policy‑as‑Code (OPA/Cedar).
• Create PKI, certificate management, and secret handling integration patterns.
• Design for resilience, HA, and disaster recovery scenarios.
• Produce Architecture Decision Records (ADRs) and govern design consistency through Architecture Review Boards and Design Authorities.
• Perform solution assurance and design reviews across vendor and in‑house deliveries.
• Identify technical risks, assumptions, and dependencies early in the lifecycle.
• Align architecture with enterprise strategy in collaboration with senior architects.
• Support engineering delivery, testing, and readiness for production stages.
• Mentor engineers and promote best practices across design teams.
• Evaluate emerging technologies and vendor products for alignment with IAM objectives.
• Contribute to programme roadmap and future‑state architecture planning.
• Enterprise Architecture and Security Architecture expertise.
• Deep knowledge of Identity and Access Management (IAM) design and operations.
• Proven experience with Authentication and Authorisation models.
• Hands‑on knowledge of Zero Trust Architectures.
• Understanding of Human, Agent, and Workload Identity solutions.
• Experience with Identity Federation protocols — OIDC, OAuth2, SAML, SCIM.
• Experience building Cloud Architectures on GCP or similar platforms.
• Proficient with Kubernetes, Service Mesh, and containerised designs.
• Strong background in API Architecture and Security implementation.
• Experience with Event‑Driven Architecture models.
• Knowledge of Policy‑as‑Code frameworks (OPA / Cedar).
• Expertise in PKI, Certificates, and Secret Management.
• Exposure to DevSecOps and CI/CD environments.
• Proven capability in designing for High Availability, Resilience, and Scalability.
• Experience overseeing Architecture Governance and Design Review Processes.
• Strong stakeholder engagement, communication, and technical leadership skills.

Project details

• Start: ASAP
• Location: Kraków, PL
• Rate: 188-225 EUR/h