IAM DevOps Engineer (Security Engineering Team)

Join our team as an IAM DevOps Engineer and help us build, automate, and operate critical identity services in a hybrid enterprise environment. This role is for an engineer who is equally comfortable with identity technologies, infrastructure, automation, and cloud migration.

You will join a Pan-Baltic security engineering environment where Identity & Access Management is not limited to user lifecycle activities. Our team is responsible for the platforms and infrastructure behind key IAM capabilities, including SSO, MFA, PAM, access governance, and the supporting directory and cloud components that keep these services reliable and secure.

What You Will Do:

• Design, deploy, automate, and maintain IAM platforms and supporting infrastructure.

• Support and improve services related to single sign-on, multi-factor authentication, privileged access management, and identity governance.

• Manage IAM capabilities across AWS, Microsoft Entra ID/Azure AD, and on-premises Active Directory environments.

• Contribute to the migration of IAM-related infrastructure from on-premises environments to the cloud.

• Build and maintain infrastructure using Terraform/Infrastructure as Code and modern CI/CD practices.

• Work with containers and orchestration technologies where relevant to IAM platform delivery.

• Apply SRE-minded engineering practices such as observability, incident response, service reliability, and performance monitoring.

• Troubleshoot complex authentication, authorization, and directory-related issues in a production environment.

• Collaborate with security, platform, and application stakeholders across the organization.

• Maintain clear and accurate technical documentation.

What We Expect

This is not a junior IAM operations role. We are looking for a self-sufficient engineer who can independently own and deliver complex technical tasks. You will work on meaningful identity and security engineering challenges in a modern hybrid environment, with an opportunity to shape the automation, reliability, and future-state architecture of core IAM services across the organization.

Required experience and skills:

• Strong hands-on experience with IAM technologies, such as SSO, MFA, PAM, and identity-related access controls.

• Solid practical experience with Active Directory administration in enterprise environments, including core directory services, policies, and troubleshooting.

• Experience working in cloud environments, ideally with both AWS and Microsoft Entra ID/Azure AD.

• Experience with Infrastructure as Code, especially Terraform (ArgoCD, Terragrunt is a plus).

• Experience with Kubernetes, Docker, or similar container platforms.

• Experience with infrastructure monitoring with Grafana, Prometheus, Zabbix, or similar.

• Experience with automation, scripting, and engineering tools such as Python, PowerShell, or similar.

• Solid practical experience with CI/CD tooling and secure software delivery practices.

• Understanding of networking fundamentals and their impact on authentication and access flows.

• Experience with incident handling, service troubleshooting, and operational support in production environments.

• Strong problem-solving ability and clear communication skills in English.

Important:

• DevOps and automation skills are mandatory for this role.

• Participation in an on-call rotation is required.

Nice-to-have:

• Familiarity with SRE concepts such as observability, alerting, reliability engineering, and performance monitoring.

• Experience in regulated environments and understanding of standards/frameworks such as GDPR, DORA, ISO 27001, NIST, or similar.

• Relevant certifications in AWS, Microsoft, DevOps, security, or IAM/PAM domains.

What We Offer:

• Flexibility. Flexible working hours, Hybrid work, and the possibility to work from anywhere in the EU, Iceland, Switzerland, and the UK (in total 90 days per year).

• International teams. Teams that go outside Pan-Baltic borders, where people value challenging work together with good humor and having fun.

• More vacation. Additional weeks of vacation are available to all employees who have been in the company for 1 year or more.

• Volunteer time off. We care about giving back to society, therefore, you will get additional days off for volunteering purposes.

• Paid leave. We are proud of our employees who are participating in military training. Therefore, Luminor offers 30 fully paid calendar days for military training every year.

• Health benefits. A competitive benefits package in addition to your salary that includes health insurance after the first 3 months pass in all three Baltic states, as well as Health days in case of your absence due to sickness without a doctor's note needed.

• Wellbeing. Access to tools and resources that help you feel good and be productive at work and in life.

• Professional growth. Internal and external training programs, workshops, conferences, online training, etc.

• Special Offer for Luminor products & services. Enjoy special offers & pricing for products and services provided by Luminor.

• Gross salary. 3180–4780 EUR/month, which is to be determined depending on your level of experience and competencies.

The application deadline is the 22nd of May. We are primarily looking for a candidate already located within the Baltics. Please apply with your CV in English and PDF format!