Senior Identity and Access Management Engineer
We are looking for a Senior IAM/PAM Engineer with strong PAM expertise and hands-on experience working with vendor platforms, including SailPoint.
The role combines both engineering and analytical responsibilities: building and enhancing connectors and scripts, designing and maintaining RBAC/ABAC models, automating JML processes, configuring access policies and certification campaigns, and driving IAM process maturity in line with Zero Trust principles.
We expect a mature, autonomous senior professional who can independently own solutions, improve processes, and act as a trusted expert in collaboration with business stakeholders and vendors.
The role combines both engineering and analytical responsibilities: building and enhancing connectors and scripts, designing and maintaining RBAC/ABAC models, automating JML processes, configuring access policies and certification campaigns, and driving IAM process maturity in line with Zero Trust principles.
We expect a mature, autonomous senior professional who can independently own solutions, improve processes, and act as a trusted expert in collaboration with business stakeholders and vendors.
- Design, deploy, and manage IAM/IGA/PAM solutions;
- Build and fine-tune system connectors using IAM/IGA/PAM solutions;
- Integrate identity data sources such as HR and ITSM systems;
- Manage and fine-tune identity lifecycle processes: Joiner, Mover, Leaver (JML);
- Automate access provisioning and deprovisioning across using APIs, SCIM, or middleware;
- Configure access reviews, certification campaigns, and policy enforcement;
- Collaborate with IT support, infrastructure, HR, and system owner teams to align IAM processes with security standards;
- Support Zero Trust implementation and develop robust RBAC/ABAC models;
- Investigate IAM-related incidents, ensure audit readiness (SOX, GDPR, ISO 27001, NIST);
- Maintain documentation for IAM architecture, processes, and controls.
Must-Have:
4–6+ years of experience in IAM / PAM / Information Security;
4–6+ years of experience in IAM / PAM / Information Security;
- Proven hands-on experience with IAM/IGA solutions:
- Source configuration, policy setup, provisioning rules.
- Identity correlation, transformation rules, and workflows.
- Certification campaigns and access governance.
- Knowledge of Google Workspace, GCP IAM, AWS IAM and Jira cloud;
- Knowledge of IAM protocols: SAML, SCIM, OAuth 2.0, OpenID Connect;
- Hands-on experience with building global RBAC/ABAC access models and their maintenance;
- Working knowledge of Zero Trust, least privilege, and JIT provisioning principles;
- Proficiency in scripting or programming (e.g., Python, PowerShell, Java, REST APIs);
- Experience with Git and IAM process automation;
- English proficiency: Upper-Intermediate (B2) or higher.
Nice to Have:
- Experience integrating with HR and ITSM systems;
- Experience integrating finance systems (e.g., Netsuite, ZIP, Yokoy);
- Experience with IAM/IGA systems (e.g., Sailpoint, Okta, One Identity);
- Experience with PAM systems (e.g., Teleport, Boundary, CyberArk)
- Experience migrating from legacy IAM systems to cloud-native platforms;
- Relevant certifications CISSP / CIMP / Azure / Okta / AWS / Sailpoint certifications.
- Help us challenge injustice by creating fair choices for millions of people across 48 countries.
- Develop your professional skills with access to mentoring, career consulting, and learning programs.
- Collaborate with teams around the world and gain international experience through our Global Talent Exchange Program.
- Engage in company-wide challenges, awards, sports activities, employee-led social impact and volunteering projects.
- Work alongside people who take initiative, speak openly, and challenge themselves to grow.
- Improve your language skills through co-financed courses and internal speaking clubs.
Final benefits may vary depending on the location.