IAM Engineer
Zilch · United Kingdom
Who we are:
We're one of Europe's fastest-growing fintech companies – on a mission to create the world's most empowering way to pay.
We launched the product in 2020 and achieved double unicorn status, valued at $2 billion, and since then have taken on more than 6 million customers.
Our mission is to become the best way to pay for anything, anywhere and say goodbye to credit costs for everyone. This is huge. Want to join us?
The Role:
We are looking for an IAM Engineer to support day-to-day identity and access management operations, primarily using Okta Workforce Identity Cloud. This is a hands-on role suited to someone beginning their IAM career or developing from an IT support or security operations position. You will help manage secure access to SaaS, cloud and internal systems, with structured guidance from experienced IAM and security engineers.
You will support joiner, mover and leaver processes, application access requests, Okta troubleshooting and role-based access control (RBAC). You will also gain practical exposure to Terraform-managed IAM configuration through peer-reviewed changes and established deployment processes.
What you’ll do:
- Process and fulfil approved access requests, user onboarding, transfers and offboarding in Okta and connected applications.
- Assist with Okta user, group, application assignment and MFA enrolment administration, following documented procedures.
- Support role-based and group-based access assignments in line with least-privilege and approval requirements.
- Perform first-line troubleshooting for SSO login failures, MFA issues, account lockouts and provisioning errors; escalate complex cases.
- Check and reconcile access records, provisioning status and leaver deprovisioning outcomes, raising exceptions promptly.
- Support regular access reviews, entitlement checks and collection of evidence for internal and external audits.
- Assist with onboarding applications to Okta by gathering requirements and testing SAML, OIDC or SCIM integrations under supervision.
- Review and make simple, approved Terraform configuration changes to Okta groups or application assignments, using version control and peer review.
- Follow change control, ticketing, documented runbooks and security incident escalation procedures.
- Keep IAM tickets, knowledge articles, configuration records and operational documentation accurate and current.
- Work with IT, Security, HR and application owners to resolve routine identity issues and identify recurring problems.
What we're looking for:
- Some practical experience in IT support, service desk, systems administration, security operations or IAM; relevant placements or apprenticeships considered.
- Basic familiarity with Okta or another identity provider, including users, groups, single sign-on and multifactor authentication.
- Understanding of access requests, approvals, account provisioning, deprovisioning and the joiner/mover/leaver lifecycle.
- Awareness of RBAC, least privilege and the importance of separating privileged and standard access.
- Ability to follow runbooks, manage tickets carefully and document changes and troubleshooting clearly.
- Familiarity with Microsoft Entra ID, Active Directory, Google Workspace or comparable directory services.
- Basic knowledge of SAML, OIDC or SCIM concepts, or a willingness to develop these skills.
- Interest in Infrastructure as Code and Terraform; prior production Terraform experience is not required.
- Good communication, attention to detail, customer service and willingness to learn from senior engineers.
Bonus skills:
- Exposure to Okta Workforce Identity Cloud or an Okta Certified Professional learning pathway.
- Introductory Terraform knowledge, including reading plans, understanding resources and using Git pull requests.
- Experience supporting enterprise SaaS applications such as Microsoft 365, GitHub, Atlassian or Slack.
- Familiarity with SCIM provisioning or HR-driven joiner/mover/leaver workflows.
- Awareness of ISO 27001, SOC 2, Cyber Essentials Plus or GDPR-related access controls.
- Basic PowerShell, Python, Bash, REST API or automation experience.
- Understanding of phishing-resistant MFA, privileged access controls and secure handling of identities.
Our Technical Environment:
- Okta Workforce Identity Cloud (users, groups, applications and MFA)
- Terraform and the Okta Terraform Provider (assisted, peer-reviewed changes)
- SSO, SAML, OIDC and SCIM (foundational knowledge)
- RBAC, group assignments and least-privilege access
- Microsoft Entra ID / Active Directory / Google Workspace
- Common cloud and SaaS platforms (Azure, AWS and business applications)
- GitHub / GitLab for version control and change reviews
- Ticketing, audit evidence and documentation tools such as Jira, ServiceNow or Confluence
Benefits.
Compensation & Savings:
- Pension scheme.
- Death in Service scheme.
- Income Protection.
- Permanent employees enjoy access to our Share Options Scheme.
- 5% back on in-app purchases.
- £200 for WFH Setup.
Health & Wellbeing:
- Private Medical Insurance including;
- GP consultations (video, telephone or face-to-face).
- Prescribed medication.
- In-patient, day-patient and out-patient care.
- Mental health support.
- Optical, dental & audiological cover.
- Physiotherapy.
- Advanced cancer cover.
- Menopause support.
- Employee Assistance Programme including:
- Unlimited mental health sessions.
- 24/7 remote GP & physiotherapy.
- 24/7 helpline for emotional & practical support.
- Savings & discounts on everyday shopping.
- 1:1 personalised well-being consultations.
- Gym membership discounts.
Family Friendly Policies:
- Enhanced maternity pay.
- Enhanced paternity pay.
- Enhanced adoption pay.
- Enhanced shared parental leave.
Learning & Development:
- Professional Qualifications.
- Professional Memberships.
- Learning Suite for e-courses.
- Internal Training Programmes.
- FCA & Regulatory training.
Workplace Perks:
- Hybrid working: office-based Monday, Wednesday, and Thursday; remote working Tuesday and Friday
- Casual dress code.
- Workplace socials.
- Healthy snacks.