Join our team as a IAM Security Engineer !
Yes, you can! That's our attitude towards our work, ambitions, ideas, and relationships. We at Luminor believe that anyone has the potential to achieve big things and encourage everyone to achieve them, professionally and personally.
Whoever you are and whatever your role is, with Luminor, you will get a once-in-a-lifetime opportunity to build a local banking champion.
We are looking for an IAM Security Engineer to join our Security Engineering team and help build, automate, and continuously improve the identity services that protect access to critical systems across the bank. This role is ideal for someone who enjoys working with identity technologies, automation, cloud platforms, and modern infrastructure, while solving complex authentication, authorization, and access management challenges.
How You Will Make an Impact:
Design, implement, and maintain Identity & Access Management (IAM) solutions across cloud and on-premise environments
Configure and enhance identity services, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and access governance capabilities
Manage and improve IAM capabilities across AWS IAM, Microsoft Entra ID, and Active Directory environments
Automate identity lifecycle and access management processes using scripting, Infrastructure as Code, and modern DevOps practices
Define and implement role-based access controls, policies, and permissions aligned with business and security requirements
Monitor IAM platforms, troubleshoot authentication and authorization issues, and contribute to incident investigations and resolution
Collaborate with cloud, infrastructure, security, and application teams to ensure secure and efficient identity services
Contribute to IAM governance, security controls, and compliance initiatives across the organization
Drive continuous improvements in automation, operational efficiency, and platform reliability
What Makes You a Great Fit:
5+ years of experience in IAM, security engineering, infrastructure engineering, or a similar technical role
Hands-on experience with identity technologies such as SSO, MFA, IAM, IGA, or PAM solutions
Strong understanding of authentication protocols and access control concepts, including OAuth, SAML, OIDC, LDAP, and role-based access control
Practical experience with Microsoft Entra ID/Azure AD, Active Directory, and/or AWS IAM
Experience with automation and scripting using PowerShell, Python, Java, or similar technologies
Experience with cloud environments and modern infrastructure practices
Good understanding of security principles, identity governance, and access management controls
Strong analytical and troubleshooting skills, with the ability to investigate and resolve complex identity-related issues
Ability to work independently, take ownership, and collaborate effectively across technical and business teams
Fluent English is required in spoken and written communication due to working on Pan-Baltic level
Additionally, It Would Be a Strong Advantage if You Have:
Experience with SailPoint, CyberArk, Delinea, Okta, Ping Identity, ForgeRock, Oracle IAM, IBM Security Verify, or similar platforms
Experience with Infrastructure as Code, CI/CD, and DevOps practices
Knowledge of regulatory and compliance frameworks such as GDPR, DORA, PSD2, ISO 27001, or NIST
AWS, Microsoft, IAM, PAM, CISSP, CISM, or similar certifications
Experience within banking, financial services, or another highly regulated environment
Why You Will Love Working Here:
Gross salary. 4,190-6,690 EUR/month, which is to be determined depending on your level of experience and competencies
Flexibility. Flexible working hours, Hybrid work, and the possibility to work from anywhere in the EU, Iceland, Switzerland, and the UK (in total 90 days per year)
International teams. Teams that go outside Pan-Baltic borders, where people value challenging work together with good humor and having fun
Culture. You’ll be joining a team where…