Identity & Access Management Engineer - Middle+
Plata Card
Salary undisclosed
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
We are looking for an Identity & Access Management Engineer to join our team.
Our team is responsible for managing and continuously improving identity and access management processes across Plata. We ensure secure and efficient access to corporate systems by maintaining identity infrastructure, developing role-based access controls, and implementing access governance practices that support the company's security and operational needs.
As an Identity & Access Management Engineer, you will manage and optimize identity operations, including Active Directory, user access, permissions, and identity lifecycle processes. You'll collaborate closely with Infrastructure, Security, HR, and application teams to resolve complex access-related issues, strengthen access governance, and introduce automation and process improvements that make identity management more secure, scalable, and efficient.
- Own and improve Identity Operations, including Active Directory operations, user and group lifecycle management, access management, and related operational processes.
- Help develop and maintain RBAC and Identity & Access Management practices across the company, including role management, access reviews, access governance, and Joiner/Mover/Leaver processes.
- Investigate complex access-related issues, analyze group memberships and permission paths, troubleshoot authentication and authorization problems, and identify the root causes of access issues.
- Improve operational processes by identifying manual or inefficient tasks, maintaining documentation, suggesting automation opportunities, and helping introduce new IAM tools and capabilities into daily operations.
- Work closely with Infrastructure, Security, HR, and application teams on access models, new service onboarding, and improvements to identity management processes.
- Depending on your experience and strengths, your primary focus may evolve toward Active Directory Operations, Identity Governance, RBAC, or Identity Lifecycle Management, while collaborating closely with the rest of the team.
- 3+ years of experience with Active Directory, Identity & Access Management, or related IT operations in an enterprise environment.
- Good understanding of Active Directory, IAM, RBAC, authentication, authorization, and identity lifecycle concepts.
- Experience managing users, groups, permissions, and access-related processes.
- Experience investigating complex access or authentication issues and performing root cause analysis.
- Ability to analyze existing processes, identify problems, and suggest practical improvements.
- Strong analytical thinking, ownership, and communication skills, with the ability to work across technical and business teams.
- Experience with Identity Governance (IGA) or enterprise IAM solutions.
- Experience with SCIM, SSO, identity provisioning, or enterprise SaaS access management.
- Experience with PowerShell, APIs, or other automation tools.
- Experience with RBAC implementation, role models, access reviews, or access certification.
- Knowledge of Joiner/Mover/Leaver processes, Segregation of Duties (SoD), and least privilege principles.
- Experience participating in IAM, security, or infrastructure improvement projects.
Our ways of working:
- Innovative Spirit: A commitment to creativity and groundbreaking solutions
- Honest Feedback: valuing open, transparent communication
- Supportive Team: a strong, collaborative community
- Celebrating Achievements: recognizing our wins together
- High-Tech Environment: a team full of smart and revolutionary people who date to challenge the status quo of incumbent finances
Our benefits:
- Relocation support to Kazakhstan, Cyprus, Serbia or Georgia with full visa & permit support to the employee and family
- Flexible work from one of our offices or remote
- Healthcare Coverage
- Education Budget: Language lessons, professional training and certifications
- Wellness Budget: Mental health and fitness activity reimbursements
- Vacation Policy: Annual leave and paid sick leave as per applicable policies
Benefits
- sick leave
About this role
Plata Card is seeking an Identity & Access Management Engineer to own and optimize identity operations across the organization. You'll manage Active Directory infrastructure, user lifecycle processes, and access governance while collaborating with Infrastructure, Security, HR, and application teams to resolve complex access issues and strengthen security controls. The role involves troubleshooting authentication and authorization problems, developing role-based access controls, and identifying opportunities to automate manual processes and introduce new IAM capabilities.
This position suits someone with at least three years of enterprise IAM or Active Directory experience who combines technical depth with process improvement mindset. You should be comfortable analyzing permission structures and access models, performing root cause analysis on identity-related incidents, and communicating findings across technical and business stakeholders. Experience with identity governance platforms, PowerShell automation, SSO, or access certification processes would strengthen your candidacy, though the core requirement is solid foundational knowledge of Active Directory, RBAC, and identity lifecycle management.
The role is fully remote and based in Belgrade, Montana. Plata Card offers relocation support to multiple countries, healthcare coverage, education and wellness budgets, and 20 days of annual leave.
How this employer is doing
solid
- Recently Raised Funding
In the news
Plata Card raises $55M through the issuance of bonds, LatamList
This role's local market on JobMinglr
Pay for this role
The employer didn't post a pay range for this role. That usually means pay is set in negotiation, which favors whoever arrives with numbers. Check ranges on comparable Identity & Access Management Engineer - Middle+ postings in Belgrade, and analyze any offer before you accept it.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.