IAM Engineer

Kraken Digital Asset Exchange; Deutschland; Vor Ort; EUR 84.070 - 168.140; Vollzeit

Zusammenfassung

Kraken is building the Identity and Access Management (IAM) team to secure its digital infrastructure. You will own, implement, and improve IAM tooling across the enterprise, with Okta and ConductorOne at the core, enabling scalable access controls and regulatory alignment.

You will collaborate on cross‑functional projects with security, engineering and IT, mentor junior engineers, and drive adoption of RBAC/ABAC and JIT models while supporting mergers and acquisitions integration.

Qualifikationen

• 2+ years using Terraform to manage IAM infrastructure at scale.
• 2+ years managing an Okta tenant with 1,000+ users, including SSO/MFA and policy control.
• 2+ years writing scripts for operational tasks and data manipulation from APIs.
• 2+ years working with IAM platforms such as SailPoint, ConductorOne, Lumos, etc.

Aufgaben

• Own, implement, and continuously improve IAM tooling like Okta and ConductorOne across the enterprise.
• Drive adoption of scalable access controls including RBAC, ABAC, and JIT models.
• Partner with compliance and audit teams to ensure access aligns with frameworks like SOX, PCI-DSS, and ISO 27001.
• Collaborate on large, cross-functional projects across security, engineering and IT.
• Mentor junior engineers and promote IAM best practices across the organization.
• Support access integration for mergers & acquisitions – onboarding acquired companies and their identity systems into our access ecosystem.

Kenntnisse

Terraform

Okta

ConductorOne

SailPoint

Scripting

Analytical thinking

Communication

Tools

Lumos

Jobbeschreibung

Building the Future of Open Finance

Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system.

Before you apply, we encourage you to explore our culture page to understand what drives us and how we work.

The team

Founded in 2011, Kraken is one of the world’s longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients.

Join our Identity and Access Management (IAM) team and help secure the foundation of Kraken’s digital infrastructure. We leverage tools like Okta and ConductorOne to build a seamless, secure, and scalable access ecosystem – one that empowers users while meeting the highest standards of regulatory compliance.

Securely managing credentials/access in Crypto comes with unique and exciting challenges. We’re solving problems like:

• How do we manage access for apps that don’t support SSO?
• How do we implement ABAC and RBAC to deliver intelligent birthright access?
• How can we enforce strong access controls without slowing down engineers and business teams?

We’re a team that values creativity, speed, and precision and we’re looking for someone equally passionate about building secure, user-friendly access systems.

The opportunity

• Own, implement, and continuously improve IAM tooling like Okta and ConductorOne across the enterprise
• Drive adoption of scalable access controls including RBAC, ABAC, and JIT models
• Partner with compliance and audit teams to ensure access aligns with frameworks like SOX, PCI‑DSS, and ISO 27001
• Collaborate on large, cross‑functional projects across security, engineering and IT
• Mentor junior engineers and promote IAM best practices across the organization
• Support access integration for mergers & acquisitions – onboarding acquired companies and their identity systems into our access ecosystem

What you bring

• 2+ years of experience using Terraform to manage IAM infrastructure at scale
• 2+ years of experience managing an Okta tenant with 1,000+ users, including best practices for SSO, MFA, and policy control
• 2+ years of experience writing scripts for common operational tasks such as generating reports or manipulating data from APIs
• 2+ years working with IGA platforms such as SailPoint, ConductorOne, Lumos, etc.
• Strong analytical and troubleshooting skills; intellectually curious and detail‑oriented
• Able to thrive in a fast‑paced environment, adapt to shifting priorities, and absorb new concepts quickly
• Excellent written and verbal communication skills, especially when interfacing with stakeholders from technical and non‑technical backgrounds

Nice to haves

• Experience supporting mergers & acquisitions (M&A) from an IAM perspective – integrating identity, access, and joiner/mover/leaver processes for acquired companies and their existing tooling
• Experience with the full IAM project lifecycle: requirements, design, testing, and change management
• Familiarity with compliance frameworks (e.g. SOX, PCI, ISO) and supporting access certification efforts
• Experience designing and implementing ABAC or RBAC models
• Understanding of Zero Trust security architecture

Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis.

Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution.

We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance.

Our commitment

Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don’t fully meet the listed requirements, especially if you’re passionate or knowledgeable about crypto.

We may ask candidates to complete job‑related skills or work‑style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision.

As an equal opportunity employer, we don’t tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws.

Compensation

$96K – $192K • Offers Equity • Offers Bonus

This is the target annual salary range for this role. This range is not inclusive of other additional compensation elements, such as our Bonus program, Equity program, Wellness allowance, and other benefits [US Only] (including medical, dental, vision and 401(k)).

The compensation range provided is influenced by various factors and represents the initial target range. Our salary offerings are dynamic and we strive to ensure that our base salary and total compensation package aligns and recognizes the top talent we aim to attract and retain. The compensation package of the successful candidate is based on various factors such as their skillset, experience, and job scope.