Why this role exists:

This role exists to scale, secure, and automate our user access management infrastructure, ensuring zero-trust integrity at high velocity. You’ll help us protect our core IT ecosystem by eliminating manual access workflows, driving identity governance, and meeting strict operational SLAs.

What you’ll drive:

Strategy & outcomes

• Enhance information security measures by conducting regular access audits for compliance with PCI DSS and ISO 27001 requirements.
• Measure and track operational SLAs, proactively fixing bottlenecks in the request pipeline to ensure high internal customer satisfaction.
• Participate in the optimization of operational processes by driving automation.

Discovery & decisions

• Validate and define role models across corporate systems, continuously identifying and correcting access anomalies or inconsistencies.
• Map and translate complex compliance and technical requirements into clean, automated access workflows.
• Partner with cross-functional teams to onboard new corporate systems into the centralized Access Flow platform.

Delivery & execution

• Deploy automation scripts (PowerShell, Bash) to eliminate repetitive data analysis tasks.
• Work with large volumes of data and utilize complex formulas within Google Spreadsheet.
• Process complex, escalated access tickets swiftly and securely, serving as the ultimate gatekeeper for critical permissions.
• Build and update comprehensive internal documentation for procedures, role definitions, and access frameworks.

What makes you a GR8 fit:

Must-have:

• 2+ years of hands-on experience in IT Security, IAM, or related technical roles (QA/AQA, IT Operations/Systems Administration, L2/L3 Support with a similar scope of tasks).
• Strong technical mastery of enterprise identity tools (e.g., Okta, CyberArk, Active Directory, PAM, and SSO solutions).
• Basic scripting skills (Bash, PowerShell, or Python) explicitly used for automating identity workflows or security tasks.
• Basic understanding of the requirements of PCI DSS and ISO 27001.
• Deep understanding of core access control principles, RBAC structures, and authentication methods.
• SLA-driven mindset with a track record of handling high-volume operational tickets without compromising security or accuracy.
• Clear communication style—able to translate rigid technical security policies into clear, non-technical steps for internal users.
• Fluency in Ukrainian or Russian; Intermediate+ level of English.

Nice-to-have:

• Familiarity with cloud security concepts and identity governance within AWS, Azure, or GCP.
• Experience configuring or troubleshooting custom Access Flow / IAM orchestration platforms.
• Relevant industry certifications (e.g., CompTIA Security+, Okta Certified Professional, or Microsoft Identity and Access Administrator).