Identity and Access Management (IAM) Engineer

Role Overview

The Identity and Access Management (IAM) Engineer will play a critical role in designing, implementing, and securing Proton's core internal identity infrastructure. As we scale globally, maintaining robust access controls and seamless identity governance is paramount to safeguarding our systems and supporting our growing team across Europe and beyond.

This role bridges modern system engineering, security architecture, and identity lifecycle automation. Sitting within our technical infrastructure and security ecosystem, you will take ownership of our core IAM stack, which leverages a strong foundation of self-hosted, open-source technologies (eg Keycloak, and midPoint) alongside key enterprise solutions like Duo. You will collaborate closely with cross‑functional teams to integrate identity solutions into existing architectures, automate operational workflows, and design Proton-specific access models that strike the perfect balance between strict zero-trust security and team velocity.

What you will do

IAM Architecture & Implementation

• Design, implement, integrate, and maintain Proton’s core IAM solutions, ensuring high availability, security, and scalability.
• Manage and maintain systems and applications built on self-hosted, open‑source environments.
• Collaborate closely with cross‑functional engineering teams to integrate the IAM platform seamlessly into our existing infrastructure and internal tools.

User Lifecycle & Governance

• Develop, implement, and maintain secure automated processes for user provisioning, de‑provisioning, and overall account lifecycle management to ensure seamless onboarding and offboarding.
• Design and manage identity governance processes to ensure proper management of user access rights, entitlements, and strict alignment with organizational compliance standards.
• Conduct regular audits, assessments, and access re‑certification campaigns to proactively discover and remediate access anomalies.

Authentication & Access Control

• Configure, optimize, and manage access control, authentication, and authorization mechanisms.
• Develop and enforce granular policies for identity and access management in alignment with organizational security goals.
• Support, maintain, and contribute to specialized infrastructure projects.

Automation & Systems Engineering

• Leverage your scripting and automation expertise to eliminate operational toil and streamline identity workflows.
• Write high‑quality, maintainable code for infrastructure automation and configuration management.

Job requirements

• Proven experience as an IAM Engineer with a deep focus on identity management within a production environment.
• Strong, hands‑on experience working with open‑source IAM solutions (e.g., FreeIPA, Keycloak, midPoint).
• Deep technical understanding of core identity protocols and standards, specifically LDAP, SAML, OAuth, and OIDC.
• Strong proficiency in scripting languages (e.g., Python, Bash) for automation, integration, and tooling tasks.
• Solid background in system engineering, particularly with managing, deploying, and maintaining complex self‑hosted solutions.
• Ability to adapt quickly in a fast‑paced environment.
• Strong communication and interpersonal skills, with a proven track record of collaborating effectively across engineering and non‑engineering teams.

Preferred qualifications

• Advanced proficiency in implementing, configuring, and maintaining midPoint.
• Hands‑on experience with configuration management and infrastructure‑as‑code tools (such as Ansible, Puppet).
• Prior experience managing identity governance frameworks, including compliance reporting and access re‑certification campaigns.
• Relevant industry certifications in IAM‑related technologies (e.g., CIDPRO certification).

Success in This Role

• Proton’s identity lifecycle processes (onboarding, offboarding, and transitions) become fully automated, secure, and seamless.
• Internal open‑source IAM solutions are robustly engineered, highly available, and perfectly integrated across our infrastructure.
• Identity governance and re‑certification campaigns are managed effectively with minimal manual overhead and clear auditability.
• Authentication mechanisms and access controls are optimized to enforce strict security baselines without breaking organizational agility.

What We Offer

• Work that Matters – millions of people trust Proton with their privacy. Your work here is real and impacts users worldwide.
• Stock Options – you become an owner from day one.
• Technology – you receive the right hardware and software to do your best work.
• Learning & Development – we invest in your growth and give you real challenges and ownership from day one.
• Employee Benefits – strong health coverage, solid retirement options, generous leave, and wellness support.
• In‑Person Collaboration – collaboration in offices across Geneva, Zürich, Barcelona, London and more.
• Food – lunch and snacks in our offices.
• Transport – coverage for public transport, bike allowance, or parking.
• Flexible Working – you own your schedule and focus on outcomes.

Our Commitment to Diversity and Inclusion

At Proton, we believe diversity drives innovation and strengthens our mission to provide privacy as a default for all. We are committed to fostering an inclusive environment where all individuals, regardless of race, ethnicity, gender, age, sexual orientation, physical ability, or socio‑economic background, feel valued and empowered. We strive to create equal opportunities, promote open dialogue, and support continuous learning to ensure every voice is heard and respected.

If you need any extra support or reasonable adjustments during the hiring process, please let your talent partner know.

Candidate Privacy Notice

When you apply for a position, refer a candidate, or are considered for a role at Proton Technologies AG (Proton, "we", "us", or "our"), your information is stored in Greenhouse, in accordance with their Service Privacy Policy. This information is used to evaluate your suitability for the posted position. We also retain this information for consideration for future roles that you may apply for or that we believe may align with your background and skills.

If we no longer have a legitimate business need to process your information, we will either delete or anonymize it. Should you have any inquiries about how we use or manage your information, or if you wish to access, correct, or delete your data, please contact our privacy team at

Compensation range

Paris: 53.000 - 80.000 gross annually*Other locations: Compensation will be discussed during the interview process*Final compensation will be determined based on the candidate's qualifications, skills, and previous experience