身份认证系统开发工程师
IAM System Developer
InPost Group 是一家创新的欧洲户外配送公司，正在革新包裹配送方式。公司在多个国家开展业务，其智能快递柜网络为客户提供快速、便捷和安全的配送选择。截至2023年3月，InPost Group 是一家上市公司，市值约为50亿美元。全球拥有超过10,000名员工，InPost Group 是欧洲最大的户外配送服务提供商之一，致力于提供可持续且高效的配送解决方案，以满足当今快速变化环境中客户不断发展的需求。
我们是一支打造波兰最佳快消品电商的团队。我们目前的产品组合中已有超过300,000种商品，与300多家卖家合作，我们的移动应用在波兰已获得近150万用户下载。由于我们的产品由许多必须协同高效运作并有效管理的组件构成，我们正在寻找有经验的以消费者为中心（Web/移动应用产品）的工程负责人加入我们，共同推进这一旅程——对我们的未来平台建设产生重大影响，改进流程，并帮助我们在所有类型的设备上为市场提供最佳客户体验。
我们正在寻找一名 IAM 系统开发人员加入这个项目，作为独立贡献者，直接与我们的产品经理以及我们的实施合作伙伴合作。你将承担更多实际编码和集成工作，尤其是构建 IAM 平台与我们内部系统之间的接口，同时直接与业务相关方沟通，将他们的需求转化为技术解决方案。
你会做什么
· 开发和维护 SailPoint（IdentityIQ）平台的功能和连接器，连接源/目标系统，如 Active Directory、Azure AD、SAP、HR 系统和 SaaS 应用。
· 设计并构建与 InPost 内部系统的定制集成和接口，与我们的实施合作伙伴（Integrity Partners）紧密合作。
· 使用 PowerShell、Python 和 Java/Groovy 自动化身份生命周期流程——包括授权、撤销、角色分配。
· 通过 REST API、SCIM、LDAP 和 SOAP/XML 构建集成，包括数据映射和转换逻辑。
· 设计并实现访问审批、升级和权限认证工作流。
· 阅读并分析系统、应用程序和 Active Directory 的日志及配置信息
查看英文原文
InPost Group is an innovative European out of home deliveries company, revolutionizing the way parcels are delivered to customers. With operations across several countries, our network of intelligent lockers provides customers with a fast, convenient, and secure delivery option. InPost Group is a publicly traded company, with a market capitalization of about $5 billion as of March 2023. With over 10,000 people worldwide, InPost Group is one of the largest out of home delivery providers in Europe, committed to providing sustainable and efficient delivery solutions to meet the evolving needs of customers in today's rapidly changing landscape.
We are a team that builds the best FMCG e-commerce in Poland. We already have over 300,000 products in our offer, we work with over 300 sellers, and our mobile application has already been downloaded by almost 1.5 million users in Poland. Due to the fact that our product consists of many elements that must work together efficiently and be managed effectively, we are looking for experienced consumer-focused (Web / Mobile App products) engineering leaders to join us in that journey - heavily influence our future platform build, improve processes and help us deliver best customer experience in the market across all types of devices.
We're looking for an IAM System Developer to join this initiative as an individual contributor, working directly with our Product Manager and alongside our implementation partner. You'll help take on more of the hands-on coding and integration work - especially building interfaces between the IAM platform and our internal systems - while also engaging directly with business stakeholders to translate their requirements into technical solutions.
What you'll do
· Develop and maintain SailPoint (IdentityIQ)platform functionality and connectors to source/target systems such as Active Directory, Azure AD, SAP, HR systems, and SaaS applications.
· Design and build custom integrations and interfaces with InPost's internal systems, working closely with our implementation partner (Integrity Partners).
· Automate identity lifecycle processes — provisioning, deprovisioning, role assignment — using PowerShell, Python, and Java/Groovy.
· Build integrations via REST API, SCIM, LDAP, and SOAP/XML, including data mappings and transformation logic.
· Design and implement access approval, escalation, and entitlement certification workflows.
· Read and analyze system, application, and Active Directory/Azure AD logs to diagnose provisioning and integration issues.
· Participate in code reviews, write unit and integration tests, and manage code in Git.
· Create and maintain technical documentation for connectors, provisioning processes, and operational procedures.
· Gather business requirements directly from business and system owners across departments, translating them into technical designs.
· Track work in Jira and participate in Agile ceremonies (sprint planning, retrospectives).
Required:
· Hands-on, hands-in-the-code experience with SailPoint IdentityIQ (or IdentityNow) — this is the platform we use, and direct experience with it is required.
· ~5 years of relevant experience overall, including: programming in Java, Python, and/or PowerShell (min. 3 years); system integrations via REST API, SCIM, or LDAP (min. 2 years); Git and CI/CD (min. 2 years); reading and analyzing system logs (min. 2 years).
· University degree in Computer Science, Software Engineering, Cybersecurity, or a related field.
· Working knowledge of IAM protocols: SAML 2.0, OIDC, OAuth 2.0, SCIM, LDAP, Kerberos.
· Technical understanding of Active Directory and Azure AD (Entra ID).
· Familiarity with core security principles: least privilege, separation of duties, RBAC.
· Polish, spoken and written (most documentation and stakeholders are Polish-speaking); English at B2 level for cross-market collaboration.
Nice to have:
· Experience with Saviynt, Okta Workflows, or a similar IGA platform.
· Microsoft SC-300 (Identity and Access Administrator Associate) certification, or willingness to pursue it.
· Exposure to SIEM tools (Splunk, Sentinel) in an IAM context.
· Familiarity with containerization (Docker, Kubernetes).
Why Join InPost?
· Opportunity to work in a diverse, international, and cross-functional environment, along with leading experts.
· You work and learn from a senior leader and their leadership team, expanding your experience and exposure in the e-commerce and logistics industries.
· InPost is a growing company that offers its people an increasing number of opportunities in several locations in Europe.
· Fulfilling careers with a range of benefits for people and investing in providing training opportunities for their development.
· You will feel a part of the InPost community that makes an impact on sustainability, convenient deliveries, and the circular economy every day.
· Excellent working environment and flexible hours
· We offer B2B type of contract