Security Engineer

At Mindbox we connect top IT talents with technology projects for leading enterprises across Europe. 

Are you passionate about cybersecurity and ready to shape the next generation of Identity & Access Management? Join our client’s team as a Security Engineer – Project Orbit and help deliver a transformational programme introducing cutting-edge IAM capabilities on a global scale.

Our client is redefining Identity & Access Management (IAM) across one of the world’s largest financial institutions. This multi-year IAM transformation initiative will deliver state-of-the-art identity services for both human and non-human identities, built around Zero Trust principles and secure-by-design practices.

Sounds like your kind of challenge? 

#LI-Hybrid - 6 days per month in the office in Kraków 

• Design and implement security controls for IAM services and platforms.
• Apply Zero Trust and Secure by Design principles across solution delivery.
• Configure secure authentication and authorization mechanisms.
• Implement service-to-service security using mTLS and manage secrets, PKI, and key rotation.
• Define and enforce Policy-as-Code solutions (OPA or related tools).
• Perform comprehensive threat modelling, security reviews of designs and code, and vulnerability assessments.
• Integrate robust cloud security for GCP and Kubernetes environments.
• Support cryptographic processes, certificate lifecycle, and privileged access controls.
• Conduct security risk assessments and assist with penetration testing and remediation.
• Implement monitoring, logging, and alerting for compliance and operational readiness.
• Contribute to DevSecOps practices and automated security testing pipelines.
• Produce clear standards, hardening guides, and operational security documentation.
• Provide guidance during security events in collaboration with Security Operations and Incident Response teams.

Note: Detailed project information will be shared during the recruitment process. 

• Proven experience in Information Security Engineering and Identity & Access Management.
• Strong knowledge of Zero Trust Architecture, authentication/authorization mechanisms, and Policy-as-Code (OPA).
• Expertise in PKI, certificate management, cryptography, and secrets management solutions.
• Hands-on experience securing cloud platforms (GCP) and Kubernetes workloads.
• Familiarity with Service Mesh Security, API Security, and DevSecOps tooling.
• Ability to conduct SSDLC activities, threat modelling, and vulnerability management.
• Understanding of security monitoring, SIEM, security compliance, and governance frameworks.
• Experience supporting incident response and risk management activities.

Joining this project you’ll become part of Mindbox – a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference. 

Submit your application! We look forward to reviewing your profile 😊 

Know someone who might be a great fit? 
Feel free to share this opportunity using the referral link: Mindbox Referrals System