About this role
About Proton
Join Proton and build a better internet where privacy is the default
Proton was founded in 2014 by scientists from CERN on a simple truth: privacy is a fundamental human right . Since then, we’ve built the world’s largest encrypted email service (Proton Mail) and expanded into Proton VPN, Proton Drive, Proton Pass, and Proton Calendar—tools used by millions globally to protect their freedom, fight censorship, and keep their data safe. In some situations, Proton has literally helped save lives!
We are profitable, independent (no VC control), and selectively hire from the top ~1% of applicants. Our 700+ team members across 50+ countries come from leading organizations and elite academic backgrounds. We move fast, keep hierarchy light, and prioritize impact over optics. If you want to do meaningful work with exceptionally high-caliber people, this is it. Join us and do work you can truly be proud of. Check our open-source projects here !
Role Overview
The Identity and Access Management (IAM) Engineer will play a critical role in designing, implementing, and securing Proton's core internal identity infrastructure. As we scale globally, maintaining robust access controls and seamless identity governance is paramount to safeguarding our systems and supporting our growing team across Europe and beyond.
This role bridges modern system engineering, security architecture, and identity lifecycle automation. Sitting within our technical infrastructure and security ecosystem, you will take ownership of our core IAM stack, which leverages a strong foundation of self-hosted, open-source technologies (eg. Keycloak, and midPoint) alongside key enterprise solutions like Duo. You will collaborate closely with cross-functional teams to integrate identity solutions into existing architectures, automate operational workflows, and design Proton-specific access models that strike the perfect balance between strict zero-trust security and team velocity.
What you will do
IAM Architecture & Implementation
• Design, implement, integrate, and maintain Proton’s core IAM solutions, ensuring high availability, security, and scalability.
• Manage and maintain systems and applications built on self-hosted, and open-source environments.
• Collaborate closely with cross-functional engineering teams to integrate the IAM platform seamlessly into our existing infrastructure and internal tools.
User Lifecycle & Governance
• Develop, implement, and maintain secure automated processes for user provisioning, de-provisioning, and overall account lifecycle management to ensure seamless onboarding and offboarding.
• Design and manage identity governance processes to ensure proper management of user access rights, entitlements, and strict alignment with organizational compliance standards.
• Conduct regular audits, assessments, and access re-certification campaigns to proactively discover and remediate access anomalies.
Authentication