Engineering Lead Analyst

🚀 Engineering Lead Analyst | IAM, PBAC & Enterprise Security | Global Identity Platform 🌍 Remote | 📄 Permanent Contract |

We are seeking a senior-level Engineering Lead Analyst to join our client, an in-house technology consultancy of a global consulting firm, driving enterprise-scale Identity and Access Management (IAM) modernization. In this role, you will take technical ownership of designing, automating, and deploying mission-critical IAM systems and Policy-Based Access Control (PBAC) architectures across large-scale, distributed environments. You will act as the core subject matter expert, guiding engineering standards, risk mitigation frameworks, and long-term security roadmaps.

What You’ll Be Doing:

• Serving as the technical subject matter expert for IAM systems and processes, driving the architecture, implementation, and long-term technology domain roadmap.
• Designing, implementing, and maintaining enterprise PBAC solutions (e.g., PlainID, Axiomatics) at scale for large user populations and complex access scenarios.
• Developing and deploying automated workflows for user provisioning, de-provisioning, and granular access control management.
• Scripting end-to-end automation solutions using Python or PowerShell to streamline identity workflows and eliminate manual interventions.
• Collaborating with cross-functional technical teams and security stakeholders to define system enhancements, conduct root-cause analyses, and ensure strict compliance with firm-mandated controls.
• Leading regular security audits and penetration testing initiatives to identify vulnerabilities, mitigate risks, and safeguard operational resilience.
• Mentoring team members, conducting code reviews, and delivering technical training on IAM governance and protocols.

What We’re Looking For:

• 5+ years of specialized experience in Identity and Access Management (IAM), ideally within financial services or large, complex global environments.
• Proven hands-on track record in PBAC principles and implementations with industry-leading platforms (PlainID, Axiomatics, or equivalent).
• Strong technical background in scripting and automation utilizing Python, PowerShell, or related languages.
• Deep expertise in directory services (Active Directory, LDAP) and modern identity providers (PlainID, Okta, Azure AD).
• Solid familiarity with enterprise security and authentication protocols: SAML, OAuth, and OpenID Connect.
• Consultant mindset: exceptional analytical problem-solving skills, ability to manage through ambiguity under pressure, and comfort influencing technical decisions across cross-functional matrix teams.

Must-Haves:

• 5+ years of commercial IAM engineering and delivery experience.
• Demonstrable expertise in Policy-Based Access Control (PBAC) design and deployment at scale.
• Strong hands-on automation and scripting capabilities (Python / PowerShell).
• In-depth knowledge of directory services (AD, LDAP), IDPs (Okta, Azure AD), and federation protocols (SAML, OAuth, OIDC).
• Fluent English for daily international collaboration.

Location & Working Setup:

• Hybrid Work Model (Budapest, Sofia, Bucharest, Belgrade, Bratislava, Zagreb).

If you are a lead engineer ready to take true end-to-end technical ownership of a mission-critical enterprise identity architecture, apply directly or reach out with your CV to discuss the project in detail!