IAM & Directory Services Security Architect
⚲ Gdańsk
31 920 - 36 960 PLN netto (B2B)
Wymagania
- IAM
- Active Directory
- Microsoft Entra ID
- LDAP
- Kerberos
- SAML
- OpenId Connect
- OAuth 2.0
- PAM
Opis stanowiska
About the Project
We are looking for a visionary Senior/Enterprise IAM Architect to join project from logistics industry. You will become part of Identity and Access Management Team. Following a major organizational integration, your primary mission will be to thoroughly evaluate existing identity environments, uncover structural vulnerabilities, and steer IT infrastructure toward a mature, audit-ready security posture.
Rather than deploying new tools, you will focus on bringing expert methodology, architectural alignment, and long-term governance to an already well-equipped environment.
Work Mode: 100% Remote (Candidate must be based in Europe); sporadic travel to Hamburg for strategy workshops and team alignmentStart Date: ASAP
Duration: Long-term, multi-month engagement
Job Responsibilities
• Security Assessment & Remediation: Conduct deep-dive architectural reviews of Active Directory and Microsoft Entra ID environments to identify legacy risks, structural gaps, and configuration baselines
• Framework & Governance Building: Design, implement, and maintain enterprise-wide IAM/PAM governance frameworks, security standards, and reference architecture blueprints
• Policy Definition: Establish modern identity control requirements, including advanced authentication (MFA, passwordless, Conditional Access) and privileged access standards (PAM, admin tiering, just-in-time access)
• Architectural Guidance: Author clear conceptual documentation, decision records, and technical diagrams to guide engineering and delivery teams
• Stakeholder Advisory: Act as a trusted security advisor, leading workshops and effectively communicating complex architectural risks and strategic roadmaps to both technical teams and business leadership
Expectations
• 10+ years of experience in Identity & Access Management (IAM) or Enterprise Security Architecture within complex, international environments
• Deep expertise in Directory Services Security: You must possess expert-level knowledge of Active Directory (forests/trusts, Group Policy, authentication mechanisms) and Microsoft Entra ID (Azure AD)
• Protocols & Standards: Solid understanding of LDAP/LDAPS, Kerberos, SAML, OAuth 2.0, and OpenID Connect
• Regulatory Awareness: Familiarity with translating security regulations and standards (e.g., ISO 27001, NIS2, GDPR) into practical, implementable technical policies
• Communication: Fluency in English (written and spoken) with the ability to drive organizational change and persuade diverse stakeholders
Nice to have
• Hands-on familiarity with enterprise-class PAM/IGA solutions (especially CyberArk, which is already fully deployed in the environment)
• Solid understanding of the broader Microsoft Security Stack
• Recognized industry certifications: CISSP, CISM, TOGAF, SABSA, or Microsoft specific security certs (SC-100, SC-300, AZ-500)
• Language skills in German
We offer
• Ongoing support from a dedicated agent, taking care of your project continuity, client contact, necessary formalities, work comfort and development
• Consultant Development Program – advice on growth planning based on the latest trends and market needs in IT, including consultations with agents and growth mentors
• Access to 7N Learning & Development – a development and educational platform with webinars, a library of articles and industry reports, and regular invitations to one-time and recurring development events – technical, business, and lifestyle
• Spectacular integration events, both for you (e.g., annual Kick-Off trip, Christmas parties, or Summer Olympics sports events) and for your loved ones (e.g., family picnics, movie premieres)
• Professional development not only during the project – you can get involved in knowledge transfer to others within the 7N Services offering directed at 7N clients
• Relationships and access to the knowledge of the most experienced IT experts in the market – the average professional tenure of our consultants in Poland is over 10 years
• A complete benefits package, including funding for medical care, life insurance, sports cards for you and your loved ones, as well as discounts in stores in Poland and abroad
We are looking for a visionary Senior/Enterprise IAM Architect to join project from logistics industry. You will become part of Identity and Access Management Team. Following a major organizational integration, your primary mission will be to thoroughly evaluate existing identity environments, uncover structural vulnerabilities, and steer IT infrastructure toward a mature, audit-ready security posture.
Rather than deploying new tools, you will focus on bringing expert methodology, architectural alignment, and long-term governance to an already well-equipped environment.
Work Mode: 100% Remote (Candidate must be based in Europe); sporadic travel to Hamburg for strategy workshops and team alignmentStart Date: ASAP
Duration: Long-term, multi-month engagement
Job Responsibilities
• Security Assessment & Remediation: Conduct deep-dive architectural reviews of Active Directory and Microsoft Entra ID environments to identify legacy risks, structural gaps, and configuration baselines
• Framework & Governance Building: Design, implement, and maintain enterprise-wide IAM/PAM governance frameworks, security standards, and reference architecture blueprints
• Policy Definition: Establish modern identity control requirements, including advanced authentication (MFA, passwordless, Conditional Access) and privileged access standards (PAM, admin tiering, just-in-time access)
• Architectural Guidance: Author clear conceptual documentation, decision records, and technical diagrams to guide engineering and delivery teams
• Stakeholder Advisory: Act as a trusted security advisor, leading workshops and effectively communicating complex architectural risks and strategic roadmaps to both technical teams and business leadership
Expectations
• 10+ years of experience in Identity & Access Management (IAM) or Enterprise Security Architecture within complex, international environments
• Deep expertise in Directory Services Security: You must possess expert-level knowledge of Active Directory (forests/trusts, Group Policy, authentication mechanisms) and Microsoft Entra ID (Azure AD)
• Protocols & Standards: Solid understanding of LDAP/LDAPS, Kerberos, SAML, OAuth 2.0, and OpenID Connect
• Regulatory Awareness: Familiarity with translating security regulations and standards (e.g., ISO 27001, NIS2, GDPR) into practical, implementable technical policies
• Communication: Fluency in English (written and spoken) with the ability to drive organizational change and persuade diverse stakeholders
Nice to have
• Hands-on familiarity with enterprise-class PAM/IGA solutions (especially CyberArk, which is already fully deployed in the environment)
• Solid understanding of the broader Microsoft Security Stack
• Recognized industry certifications: CISSP, CISM, TOGAF, SABSA, or Microsoft specific security certs (SC-100, SC-300, AZ-500)
• Language skills in German
We offer
• Ongoing support from a dedicated agent, taking care of your project continuity, client contact, necessary formalities, work comfort and development
• Consultant Development Program – advice on growth planning based on the latest trends and market needs in IT, including consultations with agents and growth mentors
• Access to 7N Learning & Development – a development and educational platform with webinars, a library of articles and industry reports, and regular invitations to one-time and recurring development events – technical, business, and lifestyle
• Spectacular integration events, both for you (e.g., annual Kick-Off trip, Christmas parties, or Summer Olympics sports events) and for your loved ones (e.g., family picnics, movie premieres)
• Professional development not only during the project – you can get involved in knowledge transfer to others within the 7N Services offering directed at 7N clients
• Relationships and access to the knowledge of the most experienced IT experts in the market – the average professional tenure of our consultants in Poland is over 10 years
• A complete benefits package, including funding for medical care, life insurance, sports cards for you and your loved ones, as well as discounts in stores in Poland and abroad
🔍 Dekoder Ogłoszenia
🔴
Rather than deploying new tools, you will focus on bringing expert methodology, architectural alignment, and long-term governance to an already well-equipped environment.
Nie spodziewaj się nowych narzędzi, będziesz musiał pracować z tym, co jest, i skupić się na procesach i architekturze.
🔴
your primary mission will be to thoroughly evaluate existing identity environments, uncover structural vulnerabilities, and steer IT infrastructure toward a mature, audit-ready security posture.
Twoim głównym zadaniem będzie naprawianie istniejących problemów i doprowadzanie systemów do porządku, a nie budowanie czegoś od zera.
🟡
Long-term, multi-month engagement
Projekt może być długoterminowy, ale 'wielomiesięczny' może oznaczać również kilka miesięcy, a nie lata.
🟡
Author clear conceptual documentation, decision records, and technical
Oczekuje się od Ciebie tworzenia dokumentacji, co może być czasochłonne i nie zawsze najciekawszą częścią pracy.
🟢
visionary Senior/Enterprise IAM Architect
Poszukują kogoś z wizją, co może oznaczać, że oczekują od Ciebie proaktywności i proponowania nowych rozwiązań, nawet jeśli nie są one od razu wdrażane.