Engineer - IAM and Workplace Technology

Primer.io; United States; A distancia; USD 140.000 - 210.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive share options

Flexible holiday (25 days minimum)

Co-working space access across major城市

Workations & Company Retreat

Descripción de la vacante

Primer.io is seeking a senior engineer to lead Identity and Access Management and Workplace Tech. You will own end-to-end provisioning, implement SCIM and Okta, automate access workflows, and ensure audit readiness. You will collaborate with Security and GRC and mentor peers as the team scales globally.

The role is fully remote, with a focus on delivering a robust identity platform, improving efficiency, and supporting rapid growth in a fintech environment.

Formación

• Senior-level experience in IT, IAM or corporate engineering at a fast-growing tech company.
• Hands-on with identity providers (Okta preferred; Entra ID, Google Workspace or similar welcome), including SSO, SCIM and lifecycle management.
• Proven ability to automate manual IT and access work with scripting, workflows or APIs.
• Experience with SaaS administration and endpoint management (e.g., Jamf, Kandji, Intune).
• Good judgement about access: least privilege and security reviews.
• Experience owning projects end to end and helping teammates develop.
• Clear, friendly written communication.
• Experience in fintech, payments or a regulated environment (PCI DSS, SOC 2, ISO 27001).
• Experience running access reviews and providing audit evidence.
• Using AI tools to speed up support and operations work.
• Experience scaling an IT function during headcount growth.

Responsabilidades

• Work the IAM, IT and Workplace Tech queue with the team, setting turnaround and quality bars.
• Lead the technical roadmap for Tech and deliver it, starting with SCIM provisioning, Okta, automated access reviews and device enrolment.
• Automate repetitive tasks using identity tooling, scripting and AI.
• Run joiner/mover/leaver processes so new starters are provisioned day one and access removed when needed.
• Keep access controls audit-ready and collaborate on reviews with Security and GRC.
• Partner with Security Engineering on privileged access and policy exceptions, with team collaboration.
• Mentor other engineers, review work, and share knowledge.
• Track queue metrics: volume, turnaround, and automation impact.

Conocimientos

IAM expertise

Okta / SSO

Automation scripting

SaaS administration

Least privilege

End-to-end projects

Communication

Fintech/payments domain

Audit & compliance

AI tooling

Security reviews

Descripción del empleo

Описание:

An Introduction to Primer Primer is the unified infrastructure for global payments. We give finance and payments teams the visibility and control to reduce complexity, improve performance, and capture more revenue - all from a single platform. Backed by Sofina, Peak XV Partners, ICONIQ, Tencent, Accel, and Balderton, we're building the payments layer the world's best companies rely on. Watch our showcase > Read up on our $100m Series C Learn more about our culture > Which team will you be joining? You'll join Tech as a Senior Engineer. Tech owns identity and access, IT and workplace technology for the whole company. Today it's a Workplace Tech engineer and an IAM engineer, and you'll be the most senior engineer on the team. This is a hands-on role. You'll work the access and IT queue with the team, and you'll lead the technical work that shrinks it: the automation, the identity platform and the roadmap. As Primer grows and the team grows with it, there's room for the role to grow too, including into leading the team for the right person. Tech is an enablement team. It sits alongside Security Engineering, not inside it, and owns the request queue and the tools that keep everyone at Primer productive. Primer is growing fast, and access requests are growing even faster. Our job is to make getting the right access quick, safe and mostly automatic, so people can get on with their work and our security engineers can get back to security.

Задачи:

Work the IAM, IT and Workplace Tech queue alongside the team, and set the bar for turnaround and quality. Lead the technical roadmap for Tech and deliver it, starting with SCIM day-1 provisioning, Okta, automated access reviews and device enrolment. Automate the routine. Use identity tooling, scripting, workflow automation and AI to take repetitive access requests off people's plates. Run joiner, mover and leaver processes so new starters have what they need on day one and access is removed promptly when it should be. Keep access controls audit-ready. Work with Security and GRC on access reviews, least privilege and evidence for PCI DSS and SOC 2. Partner with Security Engineering on the calls that need them, such as privileged access and policy exceptions, and handle the rest within Tech. Mentor the other engineers on the team, review their work and share what you know. Track and report on how the queue is doing: volume, turnaround, and how much automation is taking off it.

• £500 towards your home office setup
• Generous learning budget
• Private Medical Insurance
• A broad set of additional perks and benefits (depending on location)

Don’t meet every single requirement? At Primer, we're dedicated to building a diverse, inclusive, and authentic workplace. If you're excited about this role but your experience doesn't align perfectly with every qualification listed, we encourage you to apply. You may be the right candidate for this or other roles. Primer is committed to the equal treatment of all current and prospective employees and adopts a zero-tolerance approach to discrimination, regardless of age, disability, sex, sexual orientation, pregnancy and maternity, race or ethnicity, religion or belief, gender identity, marriage and civil partnership, or any other background or belief.

You may not like it here if... You're looking for a management role. This is a hands-on senior engineering role. You'd rather follow an established playbook. A lot of this is being set up for the first time, and you'll be the one defining how it works. You prefer to fix requests one at a time rather than remove the reasons they come in. We measure success by how much of the queue disappears. Shifting priorities frustrate you. We're a growing company and the team's focus will change as we scale.

A typical interview process

• An initial intro call with a Talent Partner
• An interview with the Hiring Manager
• Challenge Stage - Contextualised to the role
• A final, values-alignment interview

What's the culture like at Primer? We're building a culture where people can do their best work and be proud of the impact they have. You'll be working with people who are mission-driven, smart, and reflective, and who are genuinely invested in building exceptional products and delivering success for our merchants. We work remotely, and have done since day one. We believe that building a successful, profitable company goes beyond proximity. We invest in our relationships through great remote working practices and thoughtfully designed face-to-face time, including workations, our annual company retreat, and access to co-working spaces across most major cities. The work is challenging. Scaleups are a challenge, and building category-defining products is a challenge. But there's a meaningful difference between a challenge and a struggle. At Primer, the right challenge comes with the right support: strong onboarding, a collaborative environment, and a team that is genuinely invested in your success. It's never something you face alone.

Требования:

• Senior-level experience in IT, IAM or corporate engineering at a fast-growing tech company
• Hands-on with an identity provider (Okta preferred; Entra ID, Google Workspace or similar also welcome), including SSO, SCIM and lifecycle management
• A track record of automating manual IT and access work, with scripting, workflow tools or APIs
• Experience with SaaS administration and endpoint management (e.g., Jamf, Kandji, Intune)
• Good judgement about access: you understand least privilege and know when something needs a security review
• Experience owning projects end to end and helping others on the team level up
• Clear, friendly written communication.
• Much of the job is helping colleagues across the business.
• Experience in fintech, payments or another regulated environment (PCI DSS, SOC 2, ISO 27001)
• Experience running access reviews and providing audit evidence
• Using AI tools to speed up support and operations work
• Experience scaling an IT function through a period of fast headcount growth

Условия:

• We are fully remote and globally distributed; and have been since day one
• Competitive share options
• Flexible holiday, with 25 days minimum to be taken
• Co-working space access across major cities
• Workations & Company Retreat