Senior Identity and Access Management Engineer
About this role
Senior Identity and Access Management Engineer
Department: Information Security Department
Employment Type: Full Time
Location: Kazakhstan
Description
The role combines both engineering and analytical responsibilities: building and enhancing connectors and scripts, designing and maintaining RBAC/ABAC models, automating JML processes, configuring access policies and certification campaigns, and driving IAM process maturity in line with Zero Trust principles.
We expect a mature, autonomous senior professional who can independently own solutions, improve processes, and act as a trusted expert in collaboration with business stakeholders and vendors.
Key Responsibilities
- Design, deploy, and manage IAM/IGA/PAM solutions;
- Build and fine-tune system connectors using IAM/IGA/PAM solutions;
- Integrate identity data sources such as HR and ITSM systems;
- Manage and fine-tune identity lifecycle processes: Joiner, Mover, Leaver (JML);
- Automate access provisioning and deprovisioning across using APIs, SCIM, or middleware;
- Configure access reviews, certification campaigns, and policy enforcement;
- Collaborate with IT support, infrastructure, HR, and system owner teams to align IAM processes with security standards;
- Support Zero Trust implementation and develop robust RBAC/ABAC models;
- Investigate IAM-related incidents, ensure audit readiness (SOX, GDPR, ISO 27001, NIST);
- Maintain documentation for IAM architecture, processes, and controls.
Skills, Knowledge and Expertise
4–6+ years of experience in IAM / PAM / Information Security;
- Proven hands-on experience with IAM/IGA solutions:
- Source configuration, policy setup, provisioning rules.
- Identity correlation, transformation rules, and workflows.
- Certification campaigns and access governance.
- Knowledge of Google Workspace, GCP IAM, AWS IAM and Jira cloud;
- Knowledge of IAM protocols: SAML, SCIM, OAuth 2.0, OpenID Connect;
- Hands-on experience with building global RBAC/ABAC access models and their maintenance;
- Working knowledge of Zero Trust, least privilege, and JIT provisioning principles;
- Proficiency in scripting or programming (e.g., Python, PowerShell, Java, REST APIs);
- Experience with Git and IAM process automation;
- English proficiency: Upper-Intermediate (B2) or higher.
Nice to Have:
- Experience integrating with HR and ITSM systems;
- Experience integrating finance systems (e.g., Netsuite, ZIP, Yokoy);
- Experience with IAM/IGA systems (e.g., Sailpoint, Okta, One Identity);
- Experience with PAM systems (e.g., Teleport, Boundary, CyberArk)
- Experience migrating from legacy IAM systems to cloud-native platforms;
- Relevant certifications CISSP / CIMP / Azure / Okta / AWS / Sailpoint certifications.
Why join us
- Help us challenge injustice by creating fair choices for millions of people across 48 countries.
- Develop your professional skills with access to mentoring, career consulting, and learning programs.
- Collaborate with teams around the world and gain international experience through our Global Talent Exchange Program.
- Engage in company-wide challenges, awards, sports activities, employee-led social impact and volunteering projects.
- Work alongside people who take initiative, speak openly, and challenge themselves to grow.
- Improve your language skills through co-financed courses and internal speaking clubs.
Company at a glance
inDrive is a global mobility and urban services platform. The inDrive app has been downloaded over 400 million times, and is the second most downloaded mobility app globally for the third consecutive year. In addition to ride-hailing, inDrive provides an expanding list of urban services, including intercity transportation and delivery. In 2023, inDrive launched New Ventures, a venture and M&A arm.
inDrive operates in over 1200+ cities in 48 countries.
inDrive’s Purpose and Supermission: We Challenge Injustice Through Fair Choices.
Injustice is to the inequality of opportunities and abuse of power by corporations, society and individuals.
inDrive’s strategic goal: Provide choice for 1+ billion people through business and non-profit initiatives. The company pursues this goal both through its core business, which supports local communities via a fair pricing model; and through the work of inVision, its non-profit arm. inVision’s community empowerment programs help to advance education, sports, arts and sciences, gender equality and other vital initiatives.
For more information visit www.inDrive.com
Top Benefits
- Stable Salary
- Official Employment
- Health Insurance
- Hybrid Work Mode
- Flexible Schedule
- Relocation Package
- Professional Counseling Services
- Discount Club Membership
- Internal Training Programs
- Paid Additional Training Courses
- Work Equipment
Tired of cold applications?
Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.
Know someone who'd be great for this?