Identity and Access Management (IAM) Engineer

About the Company

Proton was founded in 2014 by scientists from CERN on a simple truth: privacy is a fundamental human right. We’ve built the world’s largest encrypted email service (Proton Mail) and expanded into Proton VPN, Proton Drive, Proton Pass, and Proton Calendar—tools used by millions globally to protect their freedom, fight censorship, and keep their data safe.

Responsibilities

• Design, implement, integrate, and maintain Proton’s core IAM solutions
• Manage and maintain systems and applications built on self-hosted and open-source environments
• Develop automated processes for user provisioning, de-provisioning, and account lifecycle management
• Design and manage identity governance processes to ensure alignment with compliance standards
• Conduct regular audits, assessments, and access re-certification campaigns
• Configure and optimize access control, authentication, and authorization mechanisms
• Leverage scripting and automation to eliminate operational toil
• Write high-quality, maintainable code for infrastructure automation

Requirements

• Proven experience as an IAM Engineer in a production environment
• Hands-on experience with open-source IAM solutions (e.g., FreeIPA, Keycloak, midPoint)
• Deep technical understanding of LDAP, SAML, OAuth, and OIDC
• Proficiency in scripting languages such as Python or Bash
• Solid background in system engineering and managing self-hosted solutions
• Strong communication and interpersonal skills

Preferred Qualifications

• Advanced proficiency in implementing and maintaining midPoint
• Experience with configuration management and IaC tools like Ansible or Puppet
• Experience managing identity governance frameworks and compliance reporting
• Relevant industry certifications such as CIDPRO

Benefits

• Stock options
• High-quality hardware and software
• Learning and development investment
• Health coverage and wellness support
• Generous leave and retirement options
• In-person collaboration in modern offices
• Daily lunch and snacks
• Transport and bike allowances