Job Description
What you’ll be doing
As an IAM Engineer, you’ll ensure our identity and access management is fit for purpose, support our global Support teams, and help Wise scale. You’ll work closely with our Security team to respond to incidents and support audits involving access management. The IAM team partners with teams across Wise to scale our internal systems—keeping them secure and user‑friendly—so everyone can move without obstacles.
Your day-to-day:
- Design, implement, and operate identity lifecycle and access governance (IAG): joiner/mover/leaver, role-based access control (RBAC) and least privilege, access reviews and certifications.
- Administer Okta as our identity provider (IdP) and manage third‑party integrations using both out‑of‑the‑box features and custom work, including SSO via SAML and OIDC/OAuth2, and provisioning via SCIM.
- Build automation and internal tooling (Python preferred) to improve process efficiency and reduce manual work.
- Define and maintain policies for MFA, device posture, and conditional access; ensure authentication and authorisation follow best practice.
- Collaborate with Security on incident response and investigations; support audits and evidence collection related to access management.
- Create and maintain clear documentation, runbooks, and diagrams; participate in disaster recovery (DR) planning and exercises.
- Propose and implement improvements, modify configurations, and update internal tools through code review, change control, and CI/CD.
- Enable Support teams globally with training, playbooks, and tooling; act as an escalation point for complex issues.
- Work closely with Technicians, Engineers, and Delivery Managers to implement security policies according to best practice.
Qualifications
The experience you’ll need:
- Proficiency in at least one programming language and scripting (Python preferred) to automate IAM workflows and integrations.
- Hands-on experience with an enterprise IdP (Okta preferred) and modern authentication/authorisation standards (SAML, OIDC/OAuth2, SCIM).
- Experience operating IAM at scale, including lifecycle automation and access governance.
- Strong communicator who can drive cross‑team projects, ask the right questions, and bring work to completion.
- Ownership mindset, curiosity, and a problem‑solving approach.
- Typically 3+ years of relevant IAM/IT engineering experience, or equivalent practical experience. We value skills and impact over years.
Bonus skills / experience:
- DevOps practices (Git, CI/CD, observability) and infrastructure as code (e.g., Terraform); configuration as code for identity systems.
- Low/no‑code automation platforms (e.g., Okta Workflows, Workato, Zapier) and iPaaS patterns.
- Privileged access management (PAM) and secrets management.
- Experience with audits and compliance frameworks (e.g., ISO 27001, SOC 2, SOX)
- Relevant certifications
