Senior IAM Engineer

<p><strong>This is Adyen</strong></p> <p><span>Adyen provides payments, data, and financial products in a single solution for customers like Meta, Uber, H&amp;M, and Microsoft - making us the financial technology platform of choice. At Adyen, everything we do is engineered for ambition. </span></p> <p><span>For our teams, we create an environment with opportunities for our people to succeed, backed by the culture and support to ensure they are enabled to truly own their careers. We are motivated individuals who tackle unique technical challenges at scale and solve them as a team. Together, we deliver innovative and ethical solutions that help businesses achieve their ambitions faster.</span></p> <p>We are seeking a highly skilled and motivated <strong>Senior IAM Engineer</strong> to join our Enterprise Access Management team. In this role, you will be instrumental in advancing Adyen's identity and access management capabilities by designing, building, and maintaining robust systems for Okta Workforce Identity Cloud, OpenLDAP, and our in-house Access Portal. You will enhance identity lifecycle management, manage critical integrations, and develop automated workflows within these platforms, ensuring the secure and seamless operation of our core IAM services. This position focuses on maintaining a strong security posture and optimizing the user experience across the entire enterprise.</p> <p><strong>What You'll Do</strong><br/>As a Senior IAM Engineer, your typical day will involve a mix of project work and daily responsibilities:</p> <ul> <li>Design and implement SSO integrations for new enterprise applications and troubleshoot existing ones.</li> <li>Develop and refine automations using Okta Workflows and scripts for tasks such as user lifecycle management and process enhancements.</li> <li>Enhance our IAM security posture, testing and implementing new or advanced Okta features.</li> <li>Support the team's strategic shift towards managing Okta configurations with Terraform.</li> <li>Potentially contribute to supporting our OpenLDAP deployment and our in-house Access Portal.</li> <li>Collaborate daily with business owners, security teams, and other stakeholders.</li> </ul> <p><em><strong>Must-Have skills </strong></em></p> <ul> <li>Deep experience in core IAM principles, including: <ul> <li>Identity lifecycle management</li> <li>SSO</li> <li>MFA</li> <li>Authorization (RBAC, ABAC, etc.)</li> <li>Adaptive authentication</li> </ul> </li> <li>Experience working directly with modern Identity Provider (IdP) platforms (e.g., Okta, Azure AD, Ping Identity, OneLogin) to deliver enterprise-wide solutions.</li> <li>Experience in securing IAM infrastructure, responding to IAM-related security incidents, and consistently applying security best practices.</li> <li>Experience with cross-functional collaboration with stakeholders and Security teams.</li> <li>Experience with directory services (LDAP).</li> <li>Experience with macOS and Linux environments.</li> <li>Experience with infrastructure/configuration as code (IaC/CaC) and CI/CD processes.</li> </ul> <p><em><strong>Technical Skills</strong></em></p> <ul> <li>Automation skills via scripts or Okta Workflows.</li> <li>Application integrations with modern IdPs using SSO protocols such as SAML, OIDC/OAuth 2.0, and SCIM.</li> <li>Experience with MFA / FIDO implementation.</li> <li>Proficiency in scripting languages such as Python.</li> <li>Familiarity with IaC/CaC tools like Ansible or Terraform.</li> <li>Experience working with API testing tools such as Postman.</li> </ul> <p><em><strong>Tools</strong></em></p> <ul> <li>Experience with leading IdP platforms, preferably Okta Workforce Identity Cloud.</li> <li>Familiarity with common tools for project management and documentation like Jira &amp; Confluence.</li> <li>Proficiency with version control systems like GitLab or GitHub</li> </ul> <p><em><strong>Good-to-Haves (Trainable Skills)</strong></em></p> <ul> <li>Experience with advanced Okta Workforce Identity Cloud features such as Identity Threat Protection and Okta Workflows.</li> <li>Experience with directory services such as OpenLDAP or Active Directory.</li> <li>Familiarity with Terraform, Ansible Tower (AWX), n8n, and/or Airflow.</li> </ul> <p><strong>Challenges You'll Tackle</strong><br/>This role presents unique challenges that will allow you to grow and innovate:</p> <ul> <li>Managing identity across two separate ecosystems: our cloud IdP (Okta) for third-party tools and a separate OpenLDAP environment for on-prem services. This requires ensuring consistent lifecycle management across segregated platforms.</li> <li>Balancing three key initiatives: the continuous push to further harden our Okta security posture, managing incoming new application integrations, and the team's future transition to Infrastructure as Code.</li> </ul> <p><strong>Why Join Our Team?<br/></strong>Joining Adyen as a Senior IAM Engineer on the Enterprise Access Management team offers a compell