Senior Identity and Access Management Engineer

Senior Identity and Access Management Engineer

Department: Information Security Department

Employment Type: Full Time

Location: Georgia

We are looking for a Senior IAM/PAM Engineer with strong PAM expertise and hands-on experience working with vendor platforms, including SailPoint. The role combines both engineering and analytical responsibilities: building and enhancing connectors and scripts, designing and maintaining RBAC/ABAC models, automating JML processes, configuring access policies and certification campaigns, and driving IAM process maturity in line with Zero Trust principles. We expect a mature, autonomous senior professional who can independently own solutions, improve processes, and act as a trusted expert in collaboration with business stakeholders and vendors.

• Design, deploy, and manage IAM/IGA/PAM solutions;
• Build and fine-tune system connectors using IAM/IGA/PAM solutions;
• Integrate identity data sources such as HR and ITSM systems;
• Manage and fine-tune identity lifecycle processes:
  Joiner, Mover, Leaver (JML);
• Automate access provisioning and deprovisioning across using APIs, SCIM, or middleware;
• Configure access reviews, certification campaigns, and policy enforcement;
• Collaborate with IT support, infrastructure, HR, and system owner teams to align IAM processes with security standards;
• Support Zero Trust implementation and develop robust RBAC/ABAC models;
• Investigate IAM‑related incidents, ensure audit readiness (SOX, GDPR, ISO 27001, NIST);
• Maintain documentation for IAM architecture, processes, and controls.

Must-Have: 4-6+ years of experience in IAM / PAM / Information Security;

• Proven hands-on experience with IAM/IGA solutions:
  • Source configuration, policy setup, provisioning rules.
  • Identity correlation, transformation rules, and workflows.
  • Certification campaigns and access governance.
• Knowledge of Google Workspace, GCP IAM, AWS IAM and Jira cloud;
• Knowledge of IAM protocols: SAML, SCIM, OAuth 2.0, OpenID Connect;
• Hands-on experience with building globalRBAC/ABAC access models and their maintenance;
• Working knowledge of Zero Trust, least privilege, and JIT provisioning principles;
• Proficiency in scripting or programming (e.g., Python, Power Shell, Java, REST APIs);
• Experience with Git and IAM process automation;
• English proficiency:
  Upper-Intermediate (B2) or higher.

Nice to Have:

• Experience integrating with HR and ITSM systems;
• Experience integrating finance systems (e.g., Netsuite, ZIP, Yokoy);
• Experience with IAM/IGA systems (e.g., Sailpoint, Okta, One Identity);
• Experience with PAM systems (e.g., Teleport, Boundary, Cyber Ark)
• Experience migrating from legacy IAM systems to cloud-native platforms;
• Relevant certifications CISSP / CIMP / Azure / Okta / AWS / Sailpoint certifications.

• Help us challenge injustice by creating fair choices for millions of people across 48 countries.
• Develop your professional skills with access to mentoring, career consulting, and learning programs.
• Collaborate with teams around the world and gain international experience through our Global Talent Exchange Program.
• Engage in company-wide challenges, awards, sports activities, employee‑led social impact and volunteering projects.
• Work alongside people who take initiative, speak openly, and challenge themselves to grow.
• Improve your language skills through co-financed courses and internal speaking clubs.

Final benefits may vary depending on the location.