Identity & Access Management Engineer

We are looking for an Identity & Access Management Engineer to join our team.

Our team is responsible for managing and continuously improving identity and access management processes across Plata. We ensure secure and efficient access to corporate systems by maintaining identity infrastructure, developing role-based access controls, and implementing access governance practices that support the company's security and operational needs.

As an Identity & Access Management Engineer, you will manage and optimize identity operations, including Active Directory, user access, permissions, and identity lifecycle processes. You'll collaborate closely with Infrastructure, Security, HR, and application teams to resolve complex access-related issues, strengthen access governance, and introduce automation and process improvements that make identity management more secure, scalable, and efficient.

• Own and improve Identity Operations, including Active Directory operations, user and group lifecycle management, access management, and related operational processes.
• Help develop and maintain RBAC and Identity & Access Management practices across the company, including role management, access reviews, access governance, and Joiner/Mover/Leaver processes.
• Investigate complex access-related issues, analyze group memberships and permission paths, troubleshoot authentication and authorization problems, and identify the root causes of access issues.
• Improve operational processes by identifying manual or inefficient tasks, maintaining documentation, suggesting automation opportunities, and helping introduce new IAM tools and capabilities into daily operations.
• Work closely with Infrastructure, Security, HR, and application teams on access models, new service onboarding, and improvements to identity management processes.
• Depending on your experience and strengths, your primary focus may evolve toward Active Directory Operations, Identity Governance, RBAC, or Identity Lifecycle Management, while collaborating closely with the rest of the team.

• 3+ years of experience with Active Directory, Identity & Access Management, or related IT operations in an enterprise environment.
• Good understanding of Active Directory, IAM, RBAC, authentication, authorization, and identity lifecycle concepts.
• Experience managing users, groups, permissions, and access-related processes.
• Experience investigating complex access or authentication issues and performing root cause analysis.
• Ability to analyze existing processes, identify problems, and suggest practical improvements.
• Strong analytical thinking, ownership, and communication skills, with the ability to work across technical and business teams.

• Experience with Identity Governance (IGA) or enterprise IAM solutions.
• Experience with SCIM, SSO, identity provisioning, or enterprise SaaS access management.
• Experience with PowerShell, APIs, or other automation tools.
• Experience with RBAC implementation, role models, access reviews, or access certification.
• Knowledge of Joiner/Mover/Leaver processes, Segregation of Duties (SoD), and least privilege principles.
• Experience participating in IAM, security, or infrastructure improvement projects.

Our ways of working:

• Innovative Spirit: A commitment to creativity and groundbreaking solutions
• Honest Feedback: valuing open, transparent communication
• Supportive Team: a strong, collaborative community
• Celebrating Achievements: recognizing our wins together
• High-Tech Environment: a team full of smart and revolutionary people who date to challenge the status quo of incumbent finances

Our benefits:

• Relocation support to Kazakhstan, Cyprus, or Georgia with full visa & permit support to the employee and family
• Flexible work from one of our offices or remote
• Healthcare Coverage
• Education Budget: Language lessons, professional training and certifications
• Wellness Budget: Mental health and fitness activity reimbursements
• Vacation Policy: Annual leave and paid sick leave as per applicable policies