GNIVC IT company is a partner of state-owned companies and leaders of Russian business, a developer and system integrator of the largest state information systems, as well as commercial solutions for tax monitoring.
- The company is among the TOP 100 best employers in the country and ranks 9th in the "IT companies" category for 2025 according to the hh employer rating among large companies;
- We are in the top 25% for happiness level among IT and Russian companies in 2025 according to Happy Job;
- We have an AI sandbox – an environment for experiments and real projects on modern open-source large language models. Here you can use AI to optimize your work, automate processes, and implement your own ideas from hypothesis to result;
- We are an accredited IT company.
We are looking for an Architect for the "Management of Service Accounts and Inter-service Interaction" direction.
Projects of the AIS "Tax" of the Federal Tax Service.
Responsibilities:
- Develop an architecture for managing service accounts used by information systems, applications, microservices, and integration solutions;
- Formulate approaches to registration, identification, and accounting of services within the organization;
- Design the lifecycle processes for service accounts and machine identities;
- Develop an architecture for secure inter-service interaction;
- Define requirements for authentication, authorization, and trust management between services;
- Formulate requirements for managing certificates, keys, tokens, and other service credentials;
- Define approaches to rotation, revocation, and control of the use of service credentials;
- Develop architectural solutions for auditing and investigating actions performed by services;
- Formulate an integration architecture for interaction with PKI, secret storages, API gateways, containerization platforms, and monitoring tools;
- Participate in the development of regulatory frameworks, principles, and standards for secure interaction of information systems.
Expected Outcome:
- Target architecture for service account management, aligned with the architectures of related areas;
- Architectural requirements for components;
- Secure inter-service interaction model;
- Requirements for managing certificates, keys, and secrets;
- Principles for managing the lifecycle of service identities;
- Development roadmap for the direction.
Requirements:
- At least 5 years of experience as a system architect;
- Experience in designing large corporate security platforms, IAM, or integration solutions;
- Deep understanding of service authentication and authorization principles;
- Practical experience in designing solutions based on OAuth 2.0, OpenID Connect, mTLS, JWT, PKI;
- Understanding of Machine Identity Management principles;
- Experience in designing solutions for managing certificates, keys, and secrets;
- Understanding of modern approaches to API security and inter-service interactions;
- Knowledge of microservices platform architectures and container environments;
- Experience with Kubernetes will be an advantage;
- Experience with Service Mesh will be an advantage;
- Experience in building Zero Trust class solutions will be an advantage.
Will be a plus:
- Experience in implementing IAM, PAM, Secrets Management platforms;
- Experience with HashiCorp Vault or similar solutions;
- Familiarity with SPIFFE/SPIRE;
- Experience in designing services for high-load distributed systems;
- Experience participating in import substitution projects for information security tools;
- Experience interacting with information security and risk management departments.
We Offer:
- Flexible work formats: option to work in the office, or hybrid schedule;
- Working hours: five-day work week (Mon — Thu from 09:00 to 18:00, Fri from 09:00 to 16:45);
- Decent remuneration: competitive salary based on interview results, as well as bonuses for effective work and achieved results;
- Official employment: full compliance with the Labor Code of the Russian Federation, including paid leave (with an additional payment of 50% of the salary after 11 months of work in the Company) and salary payment twice a month;
- Health care:
- Compensation for sick leave up to 7 days with full pay equivalent to a working day,
- Voluntary medical insurance (DMS) after the probationary period with a wide list of leading medical institutions, including quality dentistry,
- Reimbursement of up to 50% of sports expenses;
- Development and training:
- Professional training and certification at the company's expense,
- Organization of internal and external meetups, hackathons, conferences, seminars, and training sessions,
- Partnership programs for learning foreign languages and developing professional skills from Skyeng and Skillbox,
- Access to the corporate library on the Alpina Digital platform;
- Additional days off: opportunity to take 5 additional paid days off (resource days) during the calendar year (from January 1 to December 31) for employees who have worked in the company for more than 11 months.
