Senior IAM Engineer

Location: Finland; hybrid work policy

Company

hirify.global provides a cloud data platform for open-source databases, search, streaming, and application infrastructure through multi-cloud solutions.

What you will do

• Own the employee joiner-mover-leaver lifecycle from the HRIS through Okta to downstream applications.
• Build and maintain Okta Workflows automation driven by the HRIS as the source of truth.
• Govern access requests, approvals, self-service access, role-based policies, and periodic access reviews.
• Extend IAM controls to service accounts, bots, API tokens, and AI agents, including provisioning, scoping, review, and deprovisioning.
• Onboard applications to SSO and automated provisioning using Okta groups, role mappings, SCIM, and push groups.
• Review integrations and access requests, assess permission scope and credential exposure, and provide identity evidence for PCI, SOC 2, and ISO 27001 audits.

Requirements

• At least five years of experience in IAM, identity engineering, or a closely related security discipline, with ownership of an identity platform.
• Deep identity provider expertise; Okta is strongly preferred, while Entra ID or Ping experience is also considered.
• Proficiency in Python, JavaScript, or similar for automating routine identity tasks.
• Fluency with AI tooling and the ability to use AI to enhance IAM capabilities and service delivery.
• End-to-end experience with technical employee onboarding and offboarding, access requests and approvals, and automated Okta fulfillment.
• Hands-on IAM experience with AWS, GCP, or Azure, including roles, policies, permission boundaries, and identity federation.
• Experience using Infrastructure as Code for identity resources, such as Terraform.
• Comfort with ambiguity and a strong sense of ownership.

Nice to have

• Practical Okta expertise across Universal Directory, profile mappings and sourcing, group rules, Expression Language, application assignments, SSO, and lifecycle management.
• Experience automating identity processes with Okta Workflows or an equivalent platform, using an HRIS as the source of truth.
• Security experience beyond identity, such as security operations, vulnerability management, cloud security posture, or incident response.
• Experience governing machine identities, including service accounts, API tokens, bot users, and credentials for automation platforms or AI agents.
• Exposure to IGA products, GRC platforms, or access certification tooling.

Culture & Benefits

• Hybrid work policy with equipment choice.
• Equity plan and country-specific benefits.
• Professional Development Plan budget for learning.
• Global Employee Assistance Program and Global Time Off Commitment covering parental, sick, and personal time.
• Cross-functional collaboration with Engineering, IT, People Operations, Security Operations, Product Security, and Compliance across a global organization.

Hiring process

• Submit a resume to apply.
• Recruitment communication comes from hirify.global or Greenhouse domains; interviews are conducted by video call or in person, never by text or chat.