Senior Engineer - IAM and Workplace Technology

Primer.io; United Kingdom; Remote; GBP 90,000 - 130,000; Full time

Job summary

Primer is building the payments infrastructure for the world. We are seeking a senior engineer to own the IAM and Workplace Tech space, leading the technical roadmap and delivering on provisioning, access reviews, and device enrolment.

You will automate routine tasks, use identity tooling and scripting to reduce queue volume, mentor teammates, and collaborate with Security to meet PCI/DSS and SOC 2 requirements. This is a hands-on, senior engineering role with room to grow within Tech.

Qualifications

• Senior-level IT experience in a fast-growing tech company.
• Hands-on with identity providers (Okta preferred; Entra ID or Google Workspace welcome).
• Proven ability to automate IT and access workflows using scripting or APIs.
• Experience with SaaS administration and endpoint management.
• Knowledge of least privilege and security reviews.

Responsibilities

• Work the IAM, IT and Workplace Tech queue alongside the team and set turnaround and quality bars.
• Lead the technical roadmap for Tech and deliver it (SCIM provisioning, Okta, automated access reviews).
• Automate routine access requests using tooling and AI.
• Manage joiner/mover/leaver processes and ensure access is removed when needed.
• Keep access controls audit-ready and coordinate with Security on reviews and evidence.

Skills

IAM

Identity provider

Automation

Scripting

Endpoint management

SSO

Tools

Okta

Entra ID

Google Workspace

SCIM

Job description

An Introduction to Primer

Primer is the unified infrastructure for global payments. We give finance and payments teams the visibility and control to reduce complexity, improve performance, and capture more revenue - all from a single platform.

Backed by Sofina, Peak XV Partners, ICONIQ, Tencent, Accel, and Balderton, we're building the payments layer the world's best companies rely on.

Watch our showcase > Read up on our $100m Series C Learn more about our culture > Which team will you be joining? You'll join Tech as a Senior Engineer. Tech owns identity and access, IT and workplace technology for the whole company. Today it's a Workplace Tech engineer and an IAM engineer, and you'll be the most senior engineer on the team. This is a hands‑on role. You'll work the access and IT queue with the team, and you'll lead the technical work that shrinks it: the automation, the identity platform and the roadmap. As Primer grows and the team grows with it, there's room for the role to grow too, including into leading the team for the right person.

Tech is an enablement team. It sits alongside Security Engineering, not inside it, and owns the request queue and the tools that keep everyone at Primer productive. Primer is growing fast, and access requests are growing even faster. Our job is to make getting the right access quick, safe and mostly automatic, so people can get on with their work and our security engineers can get back to security.

What you'll be doing

Work the IAM, IT and Workplace Tech queue alongside the team, and set the bar for turnaround and quality.

Lead the technical roadmap for Tech and deliver it, starting with SCIM day‑1 provisioning, Okta, automated access reviews and device enrolment.

Automate the routine. Use identity tooling, scripting, workflow automation and AI to take repetitive access requests off people's plates.

Run joiner, mover and leaver processes so new starters have what they need on day one and access is removed promptly when it should be.

Keep access controls audit‑ready.

Work with Security and GRC on access reviews, least privilege and evidence for PCI DSS and SOC 2.

Partner with Security Engineering on the calls that need them, such as privileged access and policy exceptions, and handle the rest within Tech.

Mentor the other engineers on the team, review their work and share what you know.

Track and report on how the queue is doing: volume, turnaround, and how much automation is taking off it.

What we're looking for

• Senior-level experience in IT, IAM or corporate engineering at a fast‑growing tech company
• Hands‑on with an identity provider (Okta preferred; Entra ID, Google Workspace or similar also welcome), including SSO, SCIM and lifecycle management
• A track record of automating manual IT and access work, with scripting, workflow tools or APIs
• Experience with SaaS administration and endpoint management (e.g. Jamf, Kandji, Intune)
• Good judgement about access: you understand least privilege and know when something needs a security review
• Experience owning projects end to end and helping others on the team level up
• Clear, friendly written communication. Much of the job is helping colleagues across the business

Nice to have

• Experience in fintech, payments or another regulated environment (PCI DSS, SOC 2, ISO 27001)
• Experience running access reviews and providing audit evidence
• Using AI tools to speed up support and operations work
• Experience scaling an IT function through a period of fast headcount growth

You may not like it here if...

You're looking for a management role.

This is a hands‑on senior engineering role.

You'd rather follow an established playbook.

A lot of this is being set up for the first time, and you'll be the one defining how it works.

You prefer to fix requests one at a time rather than remove the reasons they come in.

We measure success by how much of the queue disappears.

Shifting priorities frustrate you.

We're a growing company and the team's focus will change as we scale.

A typical interview process

• An initial intro call with a Talent Partner
• An interview with the Hiring Manager
• Challenge Stage - Contextualised to the role
• A final, values‑alignment interview

What's the culture like at Primer?

We're building a culture where people can do their best work and be proud of the impact they have. You'll be working with people who are mission‑driven, smart, and reflective, and who are genuinely invested in building exceptional products and delivering success for our merchants.

We work remotely, and have done since day one. We believe that building a successful, profitable company goes beyond proximity. We invest in our relationships through great remote working practices and thoughtfully designed face‑to‑face time, including workations, our annual company retreat, and access to co‑working spaces across most major cities. The wo