{"id":2303771,"url":"https://alion.io/job/aiven-senior-iam-engineer","title":"Senior IAM Engineer","company":{"id":40678,"name":"Aiven","domain":"aiven.io","url":"https://alion.io/company/aiven","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":75,"open_postings":10,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":43,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Helsinki, Finland"],"countries":["FI"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":58000,"max_usd":135000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":1891},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"JavaScript","optional":false},{"name":"Jira","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-10-02T05:52:56Z","employer_posted_date":"2026-10-02","last_verified_at":"2026-10-12T11:33:50Z","board_verified":true,"closed_at":null,"days_open":10,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":10},"description":"We’re a global team of over 400 people, working together to push the boundaries of open-source technology and multi-cloud solutions. Our vision is to help developers, builders, and creators bring their ideas to life with speed and simplicity, by providing a cloud data platform that makes open-source databases, search, streaming, and application infrastructure easily accessible to everyone.\nYou'd be joining an experienced and highly-engaged Security & Compliance team, working closely with Product Security, Security Operations, and Compliance. Identity touches every part of the org, so you'd have real influence over the roadmap and trajectory of Security more broadly, not just IAM. You'd be collaborating with people across the globe, with plenty of opportunity to grow your skillset across a genuinely multi-cloud footprint.\nThe Role:\nWe are seeking a proactive and detail-oriented Senior IAM Engineer to join our Security team.\nIdentity is the control plane for Aiven. Every employee, service, and automation reaches our systems through it, which makes identity and access management the determining factor in ensuring access is efficient, audited, and controlled.\nIn this role you will own identity and access management end to end: the joiner-mover-leaver lifecycle flowing from our HRIS system through Okta to every downstream application, the access request and review processes that keep entitlements defensible, and the automation that sustains both without manual intervention. You will be the reference point and partner for Engineering, IT, People Operations, and Security Operations on any question concerning who can access what, and on what basis.\nYou'll work at the center of a wide cross-functional web - partnering closely with Engineering, IT, People Operations, and Security Operations, and acting as the go-to voice on identity for the broader Security & Compliance org. Day to day, you'll live in Okta as your core platform, orchestrating lifecycle automation through Okta Workflows, managing access requests and approvals via Jira, and integrating identity across a growing set of enterprise SaaS tools, major cloud providers (AWS, GCP, Azure), and internal systems. It's a role with real technical range and ownership - you'll move between platform administration, AI integration and automation, and the judgment calls that come with owning access decisions for the whole company.\nThe role carries genuine technical breadth and will suit an engineer who treats recurring manual work as a defect to be resolved using AI-systems or repeatable automation rather than a task to be repeated.\nWhat You'll Do\nIdentity lifecycle and onboarding/offboarding - own employee lifecycle end to end, from HRIS system through Okta to downstream applications\nIdentity automation - build and maintain automation in Okta Workflows, driven by our HRIS as the source of truth\nMachine and AI agent identity - extend IAM practices to non-human identities: define how service accounts, bots, and AI agents are provisioned, scoped, reviewed, and deprovisioned, applying the same rigor to machine identity as you do to human access.\nAccess governance - own the access request and approval process, keeping routine access efficient and sensitive access controlled and auditable\nSelf-service access & IGA - continue to build self-service access and define/maintain per-role access policies refined each cycle\nApplication access and provisioning - onboard new applications to SSO and automated provisioning, design role-based access for applications, including Okta group structure, application role mappings, SCIM provisioning, and push groups\nSecurity review and cross-functional partnership - review of new integrations and access requests, assessing permission scope and credential exposureAudit and compliance - provide identity evidence for PCI, SOC 2, and ISO 27001\nWhat We’re Looking For:\n You’re an identity engineer with deep IdP expertise. Okta experience is strongly preferred, but other platforms (Entra ID/Ping) will be considered\nFive or more years in IAM, identity engineering, or a closely related security discipline, with demonstrable ownership of an identity platform rather than operational support.\nProficiency in automation in Python, JavaScript, or similar, to support the automation of routine identity tasks and reduce manual work - for us manual repetitive work is a defect.Fluent with AI tooling and able to understand how to utilize and leverage AI to enhance IAMs capabilities and service delivery.\nExperience owning technical employee onboarding and offboarding end to end, including managing access requests and approvals, and automating fulfillment through Okta rather than provisioning manually.\nHands-on cloud IAM experience with at least one major cloud provider. AWS, GCP, or Azure - including roles, policies, permission boundaries, and identity federation.\nExperience with Infrastructure as Code for identity resources, such as Terraform, so that access configuration is version-controlled and reviewable\nComfort with ambiguity and a strong sense of ownership. Much of this work is undefined until someone defines it, and we are looking for the person who will write it down.\nNice to Have\nDeep, practical Okta expertise across Universal Directory, profile mappings and sourcing, group rules and Expression Language, application assignments, SSO, and lifecycle management.\nDemonstrated experience automating identity processes with Okta Workflows or an equivalent identity automation platform, driven by an HRIS as the source of truth.\nBroader security knowledge beyond identity - for example security operations, vulnerability management, cloud security posture, or incident response.\nExperience governing machine identities, including service accounts, API tokens, bot users, and credentials for automation platforms or AI agents\nExposure to IGA products, GRC platforms, or access certification tooling\nAmazing! What’s next:\nIf you think Aiven is the place for you and that ourValues align with yours, send us your resume and we’ll get in touch!\nGlobal Benefits:\nOur global benefits are designed to help you thrive and grow, personally and professionally:\nParticipate in Aiven’s equity plan.\nBalance work and life with our hybrid work policy.\nChoose the equipment you need to set yourself up for success.\nUse your Professional Development Plan budget for learning opportunities.\nReceive holistic wellbeing support through our global Employee Assistance Program.\nInquire about our Global Time Off Commitment (Parental and Sick Leave, as well as Personal Time)\nEnjoy country-specific benefits for our global cast.\nHow to Recognize and Avoid Employment Scams:\nThere has been a rise in fake job postings used by scammers to get personal information. At Aiven, all of our emails relating to recruitment come from an @aiven.io, @greenhouse.io or @eu.greenhouse.io domain and all of our interviews are conducted by video call or in person. Our interviews will never occur via text or chat. If you’re unsure of the legitimacy of a job opportunity/offer pertaining to Aiven, please don’t hesitate to reach out to us at .\nEqual Opportunities:\nAiven provides equal employment opportunities to all qualified employees and applicants for employment without regard to age, gender identity, national or ethnic origin, religion, sexual orientation, physical and mental ability, marital and family status or without regard to any other similar personal attributes. Aiven complies with applicable local laws governing non-discrimination in employment in every location in which the company operates. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, transfer, leaves of absence, compensation, training and any other terms and conditions related to employment.\nAt Aiven we are committed to providing reasonable accommodations for qualified individuals with disabilities or special needs in our working environment and job application procedures. We make all reasonable accommodations for persons with disabilities or who otherwise need support to thrive in the workplace. We are committed to continuously improving workplace accessibility. There is an option to request a discussion in the application process but if you have any questions before applying please write to us at .\n#LI-Hybrid","description_format":"text","description_chars":8438,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Hybrid work","Professional development"],"hiring_locations":[{"name":"Finland","iso":"FI","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Platforms (IaaS & PaaS)","Databases & DBMS"],"lifecycle":[{"event":"open","at":"2026-10-11T22:04:07Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.602,"p_room":1,"age_days":10,"expected_fill_days":43,"reasons":["conf:2","stale_co","win:early"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/aiven-senior-iam-engineer","json_url":"https://alion.io/job/aiven-senior-iam-engineer.json","meta":{"generated_at":"2026-10-12T12:18:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19131,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":40678},"rest":"https://alion.io/mcp/rest/get_company?id=40678"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faiven-senior-iam-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faiven-senior-iam-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faiven-senior-iam-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/aiven-senior-iam-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faiven-senior-iam-engineer"}]}