Overview
SOFTSWISS is hiring an Infrastructure Security Engineer to join our Infrastructure Security team.
Purpose of the role
You will manage and improve the company’s IAM and PAM systems, drive automation of access and security processes, collaborate with DevOps teams to embed security into workflows, and contribute to strengthening infrastructure security and compliance across the organisation.
Key responsibilities
- Support and develop the PAM solution (Teleport) as the main administrator and L3 support
- Support and develop the current IAM solution (Keycloak) as the main administrator and L3 support
- Monitor and maintain system/application metrics related to IAM/PAM (e.g. authentication flows, login failures)
- Enhance and maintain automation for security and access provisioning operations
- Collaborate with system engineers to integrate IAM/PAM into DevOps workflows
- Monitor and improve infrastructure security and compliance using open-source monitoring tools
- Implement new security services, tools, and best practices across the company
Required Experience
- 3+ years of experience as a Security/System/DevOps engineer, or relevant experience
- Experience with administering Privileged Access Management solutions, such as Teleport or other Linux-based PAM systems, is essential for this role
- Strong knowledge and understanding of authentication/authorisation protocols:
- Mandatory: SAML, OIDC/OpenID, SCIM
- Nice to have: LDAP, Kerberos, EAP-TLS
- Experience in administering Identity and Access Management (IAM) solutions
- Experience with AAA diagnostics
- Strong Linux administration skills (especially with sudoers, facl, auditd)
- Solid Kubernetes administrator skills (in terms of Groups, Roles, RoleBindings)
- Good understanding of IT monitoring tools (Prometheus, Grafana, VictoriaMetrics)
- Experience with Python scripting for automation and infrastructure management
- Basic experience with IaC (SaltStack, Terraform, Ansible); interest in IaC
- Clear written and verbal communication skills
- Intermediate or higher level of English and Russian
Learn more about our hiring process here – what to expect, how to prepare, and what makes SOFTSWISS different.