Senior IAM Engineer

The role

We are seeking a proactive and detail-oriented Senior IAM Engineer to join our Security team. Identity is the control plane for Aiven. Every employee, service, and automation reaches our systems through it, which makes identity and access management the determining factor in ensuring access is efficient, audited, and controlled. In this role you will own identity and access management end to end: the joiner-mover-leaver lifecycle flowing from our HRIS system through Okta to every downstream application, the access request and review processes that keep entitlements defensible, and the automation that sustains both without manual intervention. You will be the reference point and partner for Engineering, IT, People Operations, and Security Operations on any question concerning who can access what, and on what basis. You'll work at the center of a wide cross-functional web - partnering closely with Engineering, IT, People Operations, and Security Operations, and acting as the go-to voice on identity for the broader Security & Compliance org. Day to day, you'll live in Okta as your core platform, orchestrating lifecycle automation through Okta Workflows, managing access requests and approvals via Jira, and integrating identity across a growing set of enterprise SaaS tools, major cloud providers (AWS, GCP, Azure), and internal systems. It's a role with real technical range and ownership - you'll move between… The role carries genuine technical breadth and will suit an engineer who treats recurring manual work as a defect to be resolved using AI-systems or repeatable automation rather than a task to be repeated. Identity lifecycle and onboarding/offboarding - own employee lifecycle end to end, from HRIS system through Okta to downstream applications Identity automation - build and maintain automation in Okta Workflows, driven by our HRIS as the source of truth Machine and AI agent identity - extend IAM practices to non-human identities: define how service accounts, bots, and AI agents are provisioned, scoped, reviewed, and deprovisioned, applying the same rigor to machine identity as you do to human access. Access governance - own the access request and approval process, keeping routine access efficient and sensitive access controlled and auditable Self-service access & IGA - continue to build self-service access and define/maintain per-role access policies refined each cycle Application access and provisioning - onboard new applications to SSO and automated provisioning, design role-based access for applications, including Okta group structure, application role mappings, SCIM provisioning, and push groups Security review and cross-functional partnership - review of new integrations and access requests, assessing permission scope and credential exposureAudit and compliance - provide identity evidence for PCI, SOC 2, and ISO 27001

What we offer

• Participate in Aiven’s equity plan.
• Balance work and life with our hybrid work policy.
• Choose the equipment you need to set yourself up for success.
• Use your Professional Development Plan budget for learning opportunities.
• Receive holistic wellbeing support through our global Employee Assistance Program.
• Inquire about our Global Time Off Commitment (Parental and Sick Leave, as well as Personal Time)
• Enjoy country-specific benefits for our global cast.