Senior Linux System Engineer - IAM

Your main focus is the identity and access management layer of our infrastructure. You will make sure every person, system, and agent gets exactly the access they need, only when they need it, and that every access decision can be explained and audited.

• Identity & Access Management: Maintain and improve our IAM infrastructure for humans, systems, and AI agents across on-premise and cloud environments, using tools such as Teleport and SPIFFE/SPIRE.
• Zero Trust & Access Policies: Work with zero trust, just-in-time, and just-enough access principles across the infrastructure. Define, refine, and enforce the access policies and models behind them.
• Security & Compliance: Work closely with Security and Compliance teams on access reviews, audits, and hardening, and turn findings into concrete improvements.
• Core Infrastructure: Alongside IAM, support and maintain our other core infrastructure components, including LDAP, Puppet, Ansible, and our mail infrastructure, and keep them stable, secure, and low-maintenance.
• Support & Reliability: Act as an escalation point for access and infrastructure issues, help teams resolve and learn from incidents, and take part in a blameless on-call rotation.
• Collaborate & Upskill: Share your IAM and security knowledge within a multidisciplinary team and across the wider engineering organization.

Minimum Requirements

• 8+ years of hands-on Linux systems engineering in large-scale, high-availability production environments.
• A strong background in identity and access management, with a solid grasp of security principles such as zero trust, least privilege, and just-in-time and just-enough access, and experience turning them into enforceable access policies.
• Hands-on experience operating production services on Kubernetes, identity and access tooling such as Teleport, SPIFFE/SPIRE, HashiCorp Vault, or equivalents, and a good understanding of PKI, short-lived certificates, and mTLS.
• Deep knowledge of LDAP and the Linux authentication stack, including SSSD, PAM, and SSH, as well as identity protocols such as OIDC, OAuth 2.0, and SAML.
• Experience with configuration management at scale (Puppet, Ansible) and with scripting or programming in Bash, Python, or Go.
• Clear communication skills, and the ability to explain access and security decisions to both technical and non-technical stakeholders.
• Hands-on experience with Infrastructure as Code (IaC).

Highly Desired Skills

• Experience with IAM in a regulated environment such as financial services (PCI DSS, DORA).
• Experience with Attribute-Based Access Control (ABAC) systems. 
• Familiarity with policy-as-code tools such as OPA, Cedar, RBAC.

Who you are

You are security-minded and think about how something can be abused before it ships. You prefer simple, reliable solutions over clever ones, and you take ownership of problems until they are solved. You enjoy working in a team with mixed expertise, you share what you know, and you keep learning as identity, security, and AI continue to evolve.