Middle Information Security Access Specialist

This role exists to scale, secure, and automate our user access management infrastructure, ensuring zero-trust integrity at high velocity. You’ll help us protect our core IT ecosystem by eliminating manual access workflows, driving identity governance, and meeting strict operational SLAs.

• Optimize and mature the automated access management service to reduce manual onboarding/offboarding touchpoints.
• Design and enforce strict security measures aligned with modern identity governance and access risk mitigation.
• Measure and track operational SLAs, proactively fixing bottlenecks in the request pipeline to ensure high internal customer satisfaction.
• Validate and define role models across corporate systems, continuously identifying and correcting access anomalies or inconsistencies.
• Map and translate complex compliance and technical requirements into clean, automated access workflows.
• Partner with cross-functional teams to onboard new corporate systems into the centralized Access Flow platform.
• Ship automation scripts (PowerShell, Bash) to eliminate repetitive security administration tasks.
• Maintain the source of truth for all system roles, sub-roles, and identity entities within the IAM infrastructure.
• Process complex, escalated access tickets swiftly and securely, serving as the ultimate gatekeeper for critical permissions.
• Build and update comprehensive internal documentation for procedures, role definitions, and access frameworks.

• 2+ years of hands-on experience as an IT Security Engineer or IAM Specialist. (required)
• Strong technical mastery of enterprise identity tools (e.g., Okta, CyberArk, Active Directory, PAM, and SSO solutions). (required)
• Solid scripting skills (Bash, PowerShell, or Python) explicitly used for automating identity workflows or security tasks. (required)
• Deep understanding of core access control principles, RBAC structures, and authentication methods. (required)
• SLA-driven mindset with a track record of handling high-volume operational tickets without compromising security or accuracy. (required)
• Clear communication style—able to translate rigid technical security policies into clear, non-technical steps for internal users. (required)
• Upper-Intermediate level of English. (required)
• Familiarity with cloud security concepts and identity governance within AWS, Azure, or GCP. (nice-to-have)
• Experience configuring or troubleshooting custom Access Flow / IAM orchestration platforms. (nice-to-have)
• Relevant industry certifications (e.g., CompTIA Security+, Okta Certified Professional, or Microsoft Identity and Access Administrator). (nice-to-have)

• Cafeteria — annual budget you allocate to: Sports • Medical • Mental health • Home office • Languages.
• Paid maternity/paternity leave + monthly childcare allowance.
• 20+ vacation days, unlimited sick leave, emergency time off.
• Remote-first + tech support + coworking compensation.
• Team events (online/offline/offsite).
• Learning culture with internal courses + growth programs.