Identity and Access Management Engineer, Proton

• Proven experience as an IAM Engineer with a deep focus on identity management within a production environment
• Strong, hands-on experience working with open-source IAM solutions (e.g., FreeIPA, Keycloak, midPoint)
• Deep technical understanding of core identity protocols and standards, specifically LDAP, SAML, OAuth, and OIDC
• Strong proficiency in scripting languages (e.g., Python, Bash) for automation, integration, and tooling tasks
• Solid background in system engineering, particularly with managing, deploying, and maintaining complex self-hosted solutions
• Ability to adapt quickly in a fast-paced environment
• Strong communication and interpersonal skills, with a proven track record of collaborating effectively across engineering and non-engineering teams

Desirable

• The Identity and Access Management (IAM) Engineer will play a critical role in designing, implementing, and securing Proton's core internal identity infrastructure
• As we scale globally, maintaining robust access controls and seamless identity governance is paramount to safeguarding our systems and supporting our growing team across Europe and beyond
• This role bridges modern system engineering, security architecture, and identity lifecycle automation
• Sitting within our technical infrastructure and security ecosystem, you will take ownership of our core IAM stack, which leverages a strong foundation of self-hosted, open-source technologies (eg. Keycloak, and midPoint) alongside key enterprise solutions like Duo
• You will collaborate closely with cross-functional teams to integrate identity solutions into existing architectures, automate operational workflows, and design Proton-specific access models that strike the perfect balance between strict zero-trust security and team velocity
• IAM Architecture & Implementation:
• Design, implement, integrate, and maintain Proton’s core IAM solutions, ensuring high availability, security, and scalability
• Manage and maintain systems and applications built on self-hosted, and open-source environments
• Collaborate closely with cross-functional engineering teams to integrate the IAM platform seamlessly into our existing infrastructure and internal tools
• User Lifecycle & Governance:
• Develop, implement, and maintain secure automated processes for user provisioning, de-provisioning, and overall account lifecycle management to ensure seamless onboarding and offboarding
• Design and manage identity governance processes to ensure proper management of user access rights, entitlements, and strict alignment with organizational compliance standards
• Conduct regular audits, assessments, and access re-certification campaigns to proactively discover and remediate access anomalies
• Authentication & Access Control:
• Configure, optimize, and manage access control, authentication, and authorization mechanisms
• Develop and enforce granular policies for identity and access management in alignment with organizational security goals
• Support, maintain, and contribute to specialized infrastructure projects
• Automation & Systems Engineering:
• Leverage your scripting and automation expertise to eliminate operational toil and streamline identity workflows
• Write high-quality, maintainable code for infrastructure automation and configuration management
• Success in This Role:
• Proton’s identity lifecycle processes (onboarding, offboarding, and transitions) become fully automated, secure, and seamless
• Internal open-source IAM solutions are robustly engineered, highly available, and perfectly integrated across our infrastructure
• Identity governance and re-certification campaigns are managed effectively with minimal manual overhead and clear auditability
• Authentication mechanisms and access controls are optimized to enforce strict security baselines without breaking organizational agility