Lead Identity & Access Management Specialist

📋 Description

• Design, configure, and maintain Identity Providers (IdP) using SAML 2.0, OIDC, and OAuth 2.0
• Leverage SCIM to automate provisioning and ensure airtight offboarding to prevent orphan accounts
• Deploy and manage SaaS Security Posture Management (SSPM) tools
• Establish and enforce security baselines (such as CIS benchmarks) across key tools, catching
• Audit, restrict, and manage OAuth permissions granted to third-party add-ons and AI extensions
• Mitigate Shadow IT and assess third-party risk (TPRM) by analyzing CASB, proxy, and endpoint logs

🎯 Requirements

• 5+ years of dedicated experience in Cloud Security, IAM Administration, or IT Security Operations
• Deep expertise in identity protocols: SAML 2.0, OIDC, OAuth 2.0, and SCIM
• Hands-on administration experience with modern IdPs (Okta or Microsoft Entra ID / Azure AD)
• Scripting capabilities in Python, PowerShell, or Bash to automate security workflows and interact
• Exceptional collaboration and communication skills to explain complex security practices to
• Pragmatic, problem-solving mindset and proven leadership capabilities to unblock and motivate team

🎁 Benefits

• 5 Weeks of paid vacation
• Sick Leave Compensation (5 paid uncertified sick days, 2 weeks fully paid with medical certificate
• Parental Leave (fully paid): 18 Weeks Maternity / 4 Week Paternity
• 2 Volunteer Days
• Meal Vouchers (CZK 220 per working day)
• Annual Prague Travel Card (Lítačka)