Senior Identity And Access Management Engineer (SailPoint)

TL;DR

Senior Identity and Access Management Engineer (IAM/PAM): Designing, deploying, and managing identity governance and privileged access solutions with an accent on RBAC/ABAC modeling and Zero Trust principles. Focus on automating JML processes, integrating identity data sources, and ensuring compliance with global security standards.

Location: Must be based in or be able to relocate to Almaty, Kazakhstan (Hybrid work mode).

Company

hirify.global is a global ride-hailing and multi-service tech company operating in 48 countries with a mission to challenge injustice and impact 1 billion lives by 2030.

What you will do

• Design, deploy, and manage IAM, IGA, and PAM solutions.
• Build and fine-tune system connectors and automate access provisioning using APIs and SCIM.
• Manage identity lifecycle processes (Joiner, Mover, Leaver) and certification campaigns.
• Develop and maintain robust RBAC/ABAC access models aligned with Zero Trust.
• Investigate IAM-related incidents and ensure audit readiness for standards like ISO 27001 and NIST.
• Collaborate with IT, HR, and infrastructure teams to align processes with security standards.

Requirements

• 4–6+ years of experience in IAM, PAM, or Information Security.
• Hands-on experience with IAM/IGA solutions including policy setup and identity transformation.
• Proficiency in scripting or programming (Python, PowerShell, or Java) and Git.
• Knowledge of IAM protocols (SAML, SCIM, OAuth 2.0, OpenID Connect).
• English proficiency: B2 or higher.
• Experience with Google Workspace, GCP IAM, AWS IAM, and Jira Cloud.

Nice to have

• Experience with SailPoint, Okta, or One Identity.
• Experience with PAM systems like Teleport, Boundary, or CyberArk.
• Experience integrating finance systems like Netsuite or Yokoy.
• Relevant certifications such as CISSP, CIMP, or vendor-specific IAM certifications.

Culture & Benefits

• Official employment with a stable salary.
• Health insurance and access to professional counseling services.
• Hybrid work mode with a flexible schedule.
• Relocation package for candidates from other regions.
• Diverse internal training programs and support for additional education.