IAM Engineer

This is a fully remote position, open to applicants in United Kingdom, +6 more states.

📋 Description

• Manage and stabilize the IAM request queue, prioritizing urgent requests and establishing baselines for time-to-resolution.

• Develop and sustain SCIM auto-provisioning workflows for initial account setup across SaaS platforms such as Okta, Slack, and GitHub.

• Oversee the entire provisioning automation process from gathering requirements to implementation and troubleshooting.

• Create and implement the IAM enrollment enhancements roadmap, which includes Mac/Windows enrollment, Okta rollout, and Tines fallback workflows.

• Collaborate with engineering and infrastructure teams to comprehend dependencies and ensure timely delivery of initiatives.

• Conduct automated access reviews and certification campaigns in conjunction with GRC.

• Design review workflows, manage data pipelines, and minimize standing access and access sprawl.

• Advance IAM technical debt and risk management, focusing on JIT/PAM initiatives and compiling least-privilege audit evidence.

• Develop the automation roadmap that supports context-aware access.

• Alleviate identity and provisioning workloads from Workplace Technology.

• Thoroughly document processes and foster trust through asynchronous communication channels.

• Work in partnership with GRC, People, compliance, engineering, Workplace Technology, and infrastructure teams.

⛳️ Requirements

• Prior experience in shipping identity or access management systems in a production environment.

• Knowledge of Okta or comparable identity providers.

• Experience with SCIM provisioning processes.

• Familiarity with access review workflows.

• Proven track record of scaling identity systems within a growing organization.

• Proficiency in automation development using Python, Go, or similar programming languages.

• Experience integrating Tines, Okta, and cloud IAM services.

• Understanding of least privilege principles, deprovisioning practices, and audit trails.

• Strong operational ownership with the ability to prioritize an IAM backlog effectively.

• Capability to analyze access challenges and convert business requirements into functional systems.

• Willingness to learn about Primer’s specific technology stack and personnel systems.

• Ability to collaborate with GRC, People, compliance, engineering, and various non-engineering teams.

• Strong documentation skills and effectiveness in working through asynchronous channels.

🏝️ Benefits

• Fully remote and globally distributed work environment.

• Competitive share options available.

• Unlimited holiday policy, with a minimum of 25 days to be taken.

• Access to co-working spaces in major cities.

• Opportunities for workations and company retreats.

• Provision of the best equipment necessary for the role.

• £500 contribution towards home office setup.

• Generous budget for learning and development.

• Private Medical Insurance coverage.

• Additional perks and benefits based on location.

• Comprehensive onboarding process.

• Supportive and collaborative work environment.

• Access to thoughtfully designed in-person engagement opportunities.