The Role
Design, deploy, and manage IAM/IGA/PAM solutions; build connectors and automation for JML, provisioning and deprovisioning; configure certification campaigns and access policies; design RBAC/ABAC and Zero Trust controls; integrate identity sources (HR, ITSM); investigate incidents, ensure audit readiness (SOX, GDPR, ISO 27001, NIST), and maintain IAM architecture and process documentation.
Summary Generated by Built In
We are looking for a Senior IAM/PAM Engineer with strong PAM expertise and hands-on experience working with vendor platforms, including SailPoint.
The role combines both engineering and analytical responsibilities: building and enhancing connectors and scripts, designing and maintaining RBAC/ABAC models, automating JML processes, configuring access policies and certification campaigns, and driving IAM process maturity in line with Zero Trust principles.
We expect a mature, autonomous senior professional who can independently own solutions, improve processes, and act as a trusted expert in collaboration with business stakeholders and vendors.
The role combines both engineering and analytical responsibilities: building and enhancing connectors and scripts, designing and maintaining RBAC/ABAC models, automating JML processes, configuring access policies and certification campaigns, and driving IAM process maturity in line with Zero Trust principles.
We expect a mature, autonomous senior professional who can independently own solutions, improve processes, and act as a trusted expert in collaboration with business stakeholders and vendors.
Key Responsibilities
- Design, deploy, and manage IAM/IGA/PAM solutions;
- Build and fine-tune system connectors using IAM/IGA/PAM solutions;
- Integrate identity data sources such as HR and ITSM systems;
- Manage and fine-tune identity lifecycle processes: Joiner, Mover, Leaver (JML);
- Automate access provisioning and deprovisioning across using APIs, SCIM, or middleware;
- Configure access reviews, certification campaigns, and policy enforcement;
- Collaborate with IT support, infrastructure, HR, and system owner teams to align IAM processes with security standards;
- Support Zero Trust implementation and develop robust RBAC/ABAC models;
- Investigate IAM-related incidents, ensure audit readiness (SOX, GDPR, ISO 27001, NIST);
- Maintain documentation for IAM architecture, processes, and controls.
Skills, Knowledge and Expertise
Must-Have:
4–6+ years of experience in IAM / PAM / Information Security;
4–6+ years of experience in IAM / PAM / Information Security;
- Proven hands-on experience with IAM/IGA solutions:
- Source configuration, policy setup, provisioning rules.
- Identity correlation, transformation rules, and workflows.
- Certification campaigns and access governance.
- Knowledge of Google Workspace, GCP IAM, AWS IAM and Jira cloud;
- Knowledge of IAM protocols: SAML, SCIM, OAuth 2.0, OpenID Connect;
- Hands-on experience with building global RBAC/ABAC access models and their maintenance;
- Working knowledge of Zero Trust, least privilege, and JIT provisioning principles;
- Proficiency in scripting or programming (e.g., Python, PowerShell, Java, REST APIs);
- Experience with Git and IAM process automation;
- English proficiency: Upper-Intermediate (B2) or higher.
Nice to Have:
- Experience integrating with HR and ITSM systems;
- Experience integrating finance systems (e.g., Netsuite, ZIP, Yokoy);
- Experience with IAM/IGA systems (e.g., Sailpoint, Okta, One Identity);
- Experience with PAM systems (e.g., Teleport, Boundary, CyberArk)
- Experience migrating from legacy IAM systems to cloud-native platforms;
- Relevant certifications CISSP / CIMP / Azure / Okta / AWS / Sailpoint certifications.
Why join us
- Stable salary, official employment
- Health insurance
- Hybrid work mode and flexile schedule
- Relocation package offered for candidates from other regions
- Access to professional counseling services including psychological, financial, and legal support
- Discount club membership
- Diverse internal training programs
- Partially or fully payed additional training courses
- All necessary work equipment
About
inDrive is a global tech company on a mission to challenge injustice. We started in 2012 in the coldest city on Earth, when a group of friends created a way for people to agree on fair ride prices. That idea grew into one of the world’s top ride-hailing apps, now with 360M installs across 48 countries.Today, we offer more than rides: from freight and delivery to intercity travel and financial services, all designed to put people first. Our goal is to positively impact 1 billion lives by 2030. Through inVision, our non-profit arm, we support education, entrepreneurship, and equality in underserved communities.Ready to ignite your inner drive?
Skills Required
- 4-6+ years experience in IAM / PAM / Information Security
- Proven hands-on experience with IAM/IGA solutions (source configuration, policy setup, provisioning rules)
- Experience with identity correlation, transformation rules, and workflows
- Experience configuring certification campaigns and access governance
- Knowledge of Google Workspace, GCP IAM, AWS IAM and Jira Cloud
- Knowledge of IAM protocols: SAML, SCIM, OAuth 2.0, OpenID Connect
- Hands-on experience building and maintaining global RBAC/ABAC access models
- Working knowledge of Zero Trust, least privilege, and JIT provisioning principles
- Proficiency in scripting/programming (Python, PowerShell, Java) and REST APIs
- Experience with Git and IAM process automation
- English proficiency: Upper-Intermediate (B2) or higher
- Experience integrating with HR and ITSM systems
- Experience integrating finance systems (e.g., Netsuite, ZIP, Yokoy)
- Hands-on experience with specific IAM/IGA systems (SailPoint, Okta, One Identity)
- Hands-on experience with PAM systems (Teleport, Boundary, CyberArk)
- Experience migrating legacy IAM systems to cloud-native platforms
- Relevant certifications (CISSP, CIMP, Azure, Okta, AWS, SailPoint)
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
inDrive is a global IT and transportation platform inDrive is one of the world’s fastest growing online ride-hailing services. Its services are available in over 749 cities in 46 countries throughout the world. The Company’s app has been downloaded over 150 million times. inDrive offers other services, including intercity transportation, freight and cargo services, as well as delivery services in different markets of operations. inDrive is based in Mountain View, California, and operates regional hubs in the Americas, Asia, the Middle East, Africa and the countries of the CIS, and employs over 2,000 people. In early 2021, inDrive achieved unicorn status after closing a $140m investment round with Insight Partners, General Catalyst, and Bond Capital, which valued the company at $1.23 billion.
