IAM Engineer

Requirements

• Proficient in using Git and Terraform to collaborate on and deploy configuration as code
• Experienced with configuring and maintaining directory services, such as OpenLDAP or Active Directory
• Skilled in managing SSO solutions, such as Okta Identity Workforce or Ping Identity, with a preference for managing these via code
• A collaborative team player who enjoys sharing knowledge and establishing best practices for automated IAM workflows
• A problem-solver who prioritizes security while ensuring a seamless user experience, supported by strong communication skills
• Proven ability to work independently, taking ownership of assigned tasks and driving them to completion
• Analytical mindset focused on identifying improvements and implementing scalable, future-proof solutions

Nice to Haves

• Knowledge of OS Query, scripting (like Python), or certifications like CISSP-ISSAP (ISC2), SANS, TOGAF, or Okta certifications

What You'll Be Doing

• Assist with the transition to Infrastructure as Code (IaC) by using Terraform to manage and automate our IAM systems across sandbox and production environments
• Manage and optimize configurations for OpenLDAP, such as updating ACLs, schemas, and policies
• Maintain and improve our hybrid Okta environment, including app integrations, lifecycle management, and policy frameworks
• Design and implement custom automations leveraging Okta Workflows or scripting to eliminate manual overhead
• Enable secure access management across various platforms in partnership with other technical teams and stakeholders
• Contribute to the design, maintenance, and testing of disaster recovery and incident response plans to ensure identity resilience
• Collaborate with and support team members in adopting best practices and modern automation standards
• Produce clear technical guides, system documentation, and deployment notes for your team, stakeholders, and end users

Perks and Benefits

• This role is based out of our Amsterdam office
• We are an office-first company and value in-person collaboration; we do not offer remote-only roles