Infrastructure Security Engineer

Overview:

SOFTSWISS is hiring an Infrastructure Security Engineer to join our Infrastructure Security team.

Purpose of the role:

You will manage and improve the company’s IAM and PAM systems, drive automation of access and security processes, collaborate with DevOps teams to embed security into workflows, and contribute to strengthening infrastructure security and compliance across the organisation.

Key responsibilities:

• Support and develop the PAM solution (Teleport) as the main administrator and L3 support
• Support and develop the current IAM solution (Keycloak) as the main administrator and L3 support
• Monitor and maintain system/application metrics related to IAM/PAM (e.g. authentication flows, login failures)
• Enhance and maintain automation for security and access provisioning operations
• Collaborate with system engineers to integrate IAM/PAM into DevOps workflows
• Monitor and improve infrastructure security and compliance using open-source monitoring tools
• Implement new security services, tools, and best practices across the company

Required Experience:

• 3+ years of experience as a Security/System/DevOps engineer, or relevant experience
• Experience with administering Privileged Access Management solutions, such as Teleport or other Linux-based PAM systems, is essential for this role
• Strong knowledge and understanding of authentication/authorisation protocols:
  
  • Mandatory: SAML, OIDC/OpenID, SCIM
  • Nice to have: LDAP, Kerberos, EAP-TLS
• Experience in administering Identity and Access Management (IAM)
• Experience with AAA diagnostics
• Strong Linux administration skills (especially with sudoers, facl, auditd)
• Solid Kubernetes administrator skills (in terms of Groups, Roles, RoleBindings)
• Good understanding of IT monitoring tools (Prometheus, Grafana, VictoriaMetrics)
• Experience with Python scripting for automation and infrastructure management
• Basic experience with IaC (SaltStack, Terraform, Ansible); interest in IaC
• Clear written and verbal communication skills
• Intermediate or higher level of English and Russian

Our Benefits:

• Full-time remote work opportunities and flexible working hours
• Private insurance
• Additional 1 Day Off per calendar year
• Sports program compensation
• Comprehensive Mental Health Programme
• Free online English lessons with a native speaker
• Generous referral program
• Training, internal workshops, and participation in international professional conferences and corporate events.