IAM Engineer

This is Adyen

Adyen provides payments, data, and financial products in a single solution for customers like Meta, Uber, H&M, and Microsoft - making us the financial technology platform of choice. At Adyen, everything we do is engineered for ambition. 

For our teams, we create an environment with opportunities for our people to succeed, backed by the culture and support to ensure they are enabled to truly own their careers. We are motivated individuals who tackle unique technical challenges at scale and solve them as a team. Together, we deliver innovative and ethical solutions that help businesses achieve their ambitions faster.

IAM Engineer

Adyen’s Enterprise Access Management team is looking for an IAM Engineer to help us evolve our identity and access management solutions. We need an expert in Single Sign-on (SSO) and Directory Services who thrives on using Terraform to build secure, automated, and frictionless identity lifecycles at scale.

What You’ll Do

• Assist with the transition to Infrastructure as Code (IaC) by using Terraform to manage and automate our IAM systems across sandbox and production environments.
• Manage and optimize configurations for OpenLDAP, such as updating ACLs, schemas, and policies.
• Maintain and improve our hybrid Okta environment, including app integrations, lifecycle management, and policy frameworks.
• Design and implement custom automations leveraging Okta Workflows or scripting to eliminate manual overhead.
• Enable secure access management across various platforms in partnership with other technical teams and stakeholders.
• Contribute to the design, maintenance, and testing of disaster recovery and incident response plans to ensure identity resilience.
• Collaborate with and support team members in adopting best practices and modern automation standards.
• Produce clear technical guides, system documentation, and deployment notes for your team, stakeholders, and end users.

Who You Are

• Proficient in using Git and Terraform to collaborate on and deploy configuration as code.
• Experienced with configuring and maintaining directory services, such as OpenLDAP or Active Directory.
• Skilled in managing SSO solutions, such as Okta Identity Workforce or Ping Identity, with a preference for managing these via code.
• A collaborative team player who enjoys sharing knowledge and establishing best practices for automated IAM workflows.
• A problem-solver who prioritizes security while ensuring a seamless user experience, supported by strong communication skills.
• Proven ability to work independently, taking ownership of assigned tasks and driving them to completion.
• Analytical mindset focused on identifying improvements and implementing scalable, future-proof solutions.
• Nice to have: Knowledge of OS Query, scripting (like Python), or certifications like CISSP-ISSAP (ISC2), SANS, TOGAF, or Okta certifications.

Our Diversity, Equity and Inclusion commitments 

Our unique approach is a product of our diverse perspectives. This diversity of backgrounds and cultures is essential in helping us maintain our momentum. Our business and technical challenges are unique, and we need as many different voices as possible to join us in solving them - voices like yours. No matter who you are or where you’re from, we welcome you to be your true self at Adyen. 

Studies show that women and members of underrepresented communities apply for jobs only if they meet 100% of the qualifications. Does this sound like you? If so, Adyen encourages you to reconsider and apply. We look forward to your application!

What’s next?

Ensuring a smooth and enjoyable candidate experience is critical for us. We aim to get back to you regarding your application within 5 business days. Our interview process tends to take about 4 weeks to complete, but may fluctuate depending on the role. Learn more about our hiring process here. Don’t be afraid to let us know if you need more flexibility.

This role is based out of our Amsterdam office. We are an office-first company and value in-person collaboration; we do not offer remote-only roles.