IAM Security Engineer

Join our team as a IAM Security Engineer!Yes, you can! That's our attitude towards our work, ambitions, ideas, and relationships. We at Luminor believe that anyone has the potential to achieve big things and encourage everyone to achieve them, professionally and personally. Whoever you are and whatever your role is, with Luminor, you will get a once-in-a-lifetime opportunity to build a local banking champion.We are looking for an IAM Security Engineer to join our Security Engineering team and help build, automate, and continuously improve the identity services that protect access to critical systems across the bank. This role is ideal for someone who enjoys working with identity technologies, automation, cloud platforms, and modern infrastructure, while solving complex authentication, authorization, and access management challenges.How You Will Make an Impact:Design, implement, and maintain Identity & Access Management (IAM) solutions across cloud and on-premise environmentsConfigure and enhance identity services, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and access governance capabilitiesManage and improve IAM capabilities across AWS IAM, Microsoft Entra ID, and Active Directory environmentsAutomate identity lifecycle and access management processes using scripting, Infrastructure as Code, and modern DevOps practicesDefine and implement role-based access controls, policies, and permissions aligned with business and security requirementsMonitor IAM platforms, troubleshoot authentication and authorization issues, and contribute to incident investigations and resolutionCollaborate with cloud, infrastructure, security, and application teams to ensure secure and efficient identity servicesContribute to IAM governance, security controls, and compliance initiatives across the organizationDrive continuous improvements in automation, operational efficiency, and platform reliabilityWhat Makes You a Great Fit: 5+ years of experience in IAM, security engineering, infrastructure engineering, or a similar technical roleHands-on experience with identity technologies such as SSO, MFA, IAM, IGA, or PAM solutionsStrong understanding of authentication protocols and access control concepts, including OAuth, SAML, OIDC, LDAP, and role-based access controlPractical experience with Microsoft Entra ID/Azure AD, Active Directory, and/or AWS IAMExperience with automation and scripting using PowerShell, Python, Java, or similar technologiesExperience with cloud environments and modern infrastructure practicesGood understanding of security principles, identity governance, and access management controlsStrong analytical and troubleshooting skills, with the ability to investigate and resolve complex identity-related issuesAbility to work independently, take ownership, and collaborate effectively across technical and business teamsFluent English is required in spoken and written communication due to working on Pan-Baltic level Additionally, It Would Be a Strong Advantage if You Have:Experience with SailPoint, CyberArk, Delinea, Okta, Ping Identity, ForgeRock, Oracle IAM, IBM Security Verify, or similar platformsExperience with Infrastructure as Code, CI/CD, and DevOps practicesKnowledge of regulatory and compliance frameworks such as GDPR, DORA, PSD2, ISO 27001, or NISTAWS, Microsoft, IAM, PAM, CISSP, CISM, or similar certificationsExperience within banking, financial services, or another highly regulated environmentWhy You Will Love Working Here:Gross salary. 4,190-6,690 EUR/month, which is to be determined depending on your level of experience and competenciesFlexibility. Flexible working hours, Hybrid work, and the possibility to work from anywhere in the EU, Iceland, Switzerland, and the UK (in total 90 days per year)International teams. Teams that go outside Pan-Baltic borders, where people value challenging work together with good humor and having funCulture. You’ll be joining a team where things move fast, ideas flow freely, and change is part of the everyday. It’s a dynamic environment that keeps you learning, growing, and never boredMore vacation. Additional weeks of vacation are available to all employees who have been in the company for 1 year or moreVolunteer time off. We care about giving back to society, therefore, you will get additional days off for volunteering purposesPaid leave. We are proud of our employees who are participating in military training. Therefore, Luminor offers 30 fully paid calendar days for military training every yearHealth benefits. A competitive benefits package in addition to your salary that includes health insurance after the first 3 months pass in all three Baltic states, as well as Health days in case of your absence due to sickness without a doctor's note neededWellbeing. Access to tools and resources that help you feel good and be productive at work and in lifeProfessional growth. Internal and external training programs, LinkedIn learning, workshops, conferences, online training, etcSpecial Offer for Luminor products & services. Enjoy special offers & pricing for products and services provided by LuminorThe application deadline is the 30th of November. We are looking for a candidate primarily already located within the Baltics. Please apply with your CV in English and PDF format!