{"id":4073848,"url":"https://alion.io/job/zilch-iam-engineer","title":"IAM Engineer","company":{"id":51374,"name":"Zilch","domain":"zilch.com","url":"https://alion.io/company/zilch","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Google Workspace","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"Service Desk","optional":false},{"name":"Terraform","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Confluence","optional":true},{"name":"GDPR","optional":true},{"name":"Git","optional":true},{"name":"GitHub","optional":true},{"name":"GitLab","optional":true},{"name":"ISO 27001","optional":true},{"name":"Jira","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Rest API","optional":true},{"name":"ServiceNow","optional":true},{"name":"Slack","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-11-11T13:49:27Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-14T17:57:29Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Who we are:\nWe're one of Europe's fastest-growing fintech companies - on a mission to create the world's most empowering way to pay.\nWe launched the product in 2020 and achieved double unicorn status, valued at $2 billion, and since then have taken on more than 6 million customers.\nOur mission is to become the best way to pay for anything, anywhere and say goodbye to credit costs for everyone. This is huge. Want to join us?\nThe Role:\nWe are looking for an IAM Engineer to support day-to-day identity and access management operations, primarily using Okta Workforce Identity Cloud. This is a hands-on role suited to someone beginning their IAM career or developing from an IT support or security operations position. You will help manage secure access to SaaS, cloud and internal systems, with structured guidance from experienced IAM and security engineers.\nYou will support joiner, mover and leaver processes, application access requests, Okta troubleshooting and role-based access control (RBAC). You will also gain practical exposure to Terraform-managed IAM configuration through peer-reviewed changes and established deployment processes.\nWhat you’ll do:\nProcess and fulfil approved access requests, user onboarding, transfers and offboarding in Okta and connected applications.\n\nAssist with Okta user, group, application assignment and MFA enrolment administration, following documented procedures.\n\nSupport role-based and group-based access assignments in line with least-privilege and approval requirements.\n\nPerform first-line troubleshooting for SSO login failures, MFA issues, account lockouts and provisioning errors; escalate complex cases.\n\nCheck and reconcile access records, provisioning status and leaver deprovisioning outcomes, raising exceptions promptly.\n\nSupport regular access reviews, entitlement checks and collection of evidence for internal and external audits.\n\nAssist with onboarding applications to Okta by gathering requirements and testing SAML, OIDC or SCIM integrations under supervision.\n\nReview and make simple, approved Terraform configuration changes to Okta groups or application assignments, using version control and peer review.\n\nFollow change control, ticketing, documented runbooks and security incident escalation procedures.\n\nKeep IAM tickets, knowledge articles, configuration records and operational documentation accurate and current.\n\nWork with IT, Security, HR and application owners to resolve routine identity issues and identify recurring problems.\nWhat we're looking for:\n\nSome practical experience in IT support, service desk, systems administration, security operations or IAM; relevant placements or apprenticeships considered.\n\nBasic familiarity with Okta or another identity provider, including users, groups, single sign-on and multifactor authentication.\n\nUnderstanding of access requests, approvals, account provisioning, deprovisioning and the joiner/mover/leaver lifecycle.\n\nAwareness of RBAC, least privilege and the importance of separating privileged and standard access.\n\nAbility to follow runbooks, manage tickets carefully and document changes and troubleshooting clearly.\n\nFamiliarity with Microsoft Entra ID, Active Directory, Google Workspace or comparable directory services.\n\nBasic knowledge of SAML, OIDC or SCIM concepts, or a willingness to develop these skills.\n\nInterest in Infrastructure as Code and Terraform; prior production Terraform experience is not required.\n\nGood communication, attention to detail, customer service and willingness to learn from senior engineers.\n\nBonus skills:\nExposure to Okta Workforce Identity Cloud or an Okta Certified Professional learning pathway.\n\nIntroductory Terraform knowledge, including reading plans, understanding resources and using Git pull requests.\n\nExperience supporting enterprise SaaS applications such as Microsoft 365, GitHub, Atlassian or Slack.\n\nFamiliarity with SCIM provisioning or HR-driven joiner/mover/leaver workflows.\n\nAwareness of ISO 27001, SOC 2, Cyber Essentials Plus or GDPR-related access controls.\n\nBasic PowerShell, Python, Bash, REST API or automation experience.\n\nUnderstanding of phishing-resistant MFA, privileged access controls and secure handling of identities.\n\nOur Technical Environment:\nOkta Workforce Identity Cloud (users, groups, applications and MFA)\n\nTerraform and the Okta Terraform Provider (assisted, peer-reviewed changes)\n\nSSO, SAML, OIDC and SCIM (foundational knowledge)\n\nRBAC, group assignments and least-privilege access\n\nMicrosoft Entra ID / Active Directory / Google Workspace\n\nCommon cloud and SaaS platforms (Azure, AWS and business applications)\n\nGitHub / GitLab for version control and change reviews\n\nTicketing, audit evidence and documentation tools such as Jira, ServiceNow or Confluence\n\nBenefits.\nCompensation & Savings:\nPension scheme.\n\nDeath in Service scheme.\n\nIncome Protection.\n\nPermanent employees enjoy access to our Share Options Scheme.\n\n5% back on in-app purchases.\n\n£200 for WFH Setup.\n\nHealth & Wellbeing:\nPrivate Medical Insurance including;\n\nGP consultations (video, telephone or face-to-face).\n\nPrescribed medication.\n\nIn-patient, day-patient and out-patient care.\n\nMental health support.\n\nOptical, dental & audiological cover.\n\nPhysiotherapy.\n\nAdvanced cancer cover.\n\nMenopause support.\n\nEmployee Assistance Programme including:\nUnlimited mental health sessions.\n\n24/7 remote GP & physiotherapy.\n\n24/7 helpline for emotional & practical support.\n\nSavings & discounts on everyday shopping.\n\n1:1 personalised well-being consultations.\n\nGym membership discounts.\n\nFamily Friendly Policies:\nEnhanced maternity pay.\n\nEnhanced paternity pay.\n\nEnhanced adoption pay.\n\nEnhanced shared parental leave.\n\nLearning & Development:\nProfessional Qualifications.\n\nProfessional Memberships.\n\nLearning Suite for e-courses.\n\nInternal Training Programmes.\n\nFCA & Regulatory training.\n\nWorkplace Perks:\nHybrid working: office-based Monday, Wednesday, and Thursday; remote working Tuesday and Friday\n\nCasual dress code.\n\nWorkplace socials.\n\nHealthy snacks.","description_format":"text","description_chars":6039,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Gym membership","Health insurance","Hybrid work","Parental leave","Stock options"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Buy Now, Pay Later"],"lifecycle":[{"event":"open","at":"2026-11-11T14:39:27Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-11-14T07:33:33+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":43,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-11-14T05:58:10Z"},"pay":null,"html_url":"https://alion.io/job/zilch-iam-engineer","json_url":"https://alion.io/job/zilch-iam-engineer.json","meta":{"generated_at":"2026-11-14T20:14:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25299,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":51374},"rest":"https://alion.io/mcp/rest/get_company?id=51374"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzilch-iam-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzilch-iam-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzilch-iam-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zilch-iam-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzilch-iam-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4073848}},{"tool":"search_jobs","arguments":{"company":"zilch.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4073848},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}