The opportunity
Adyen provides payments, data, and financial products in a single solution for customers like Meta, Uber, H&M, and Microsoft - making us the financial technology platform of choice. At Adyen, everything we do is engineered for ambition.
What you'll do
Identity & Access Management: Maintain and improve our IAM infrastructure for humans, systems, and AI agents across on-premise and cloud environments, using tools such as Teleport and SPIFFE/SPIRE.
Zero Trust & Access Policies: Work with zero trust, just-in-time, and just-enough access principles across the infrastructure. Define, refine, and enforce the access policies and models behind them.
Security & Compliance: Work closely with Security and Compliance teams on access reviews, audits, and hardening, and turn findings into concrete improvements.
Core Infrastructure: Alongside IAM, support and maintain our other core infrastructure components, including LDAP, Puppet, Ansible, and our mail infrastructure, and keep them stable, secure, and low-maintenance.
Support & Reliability: Act as an escalation point for access and infrastructure issues, help teams resolve and learn from incidents, and take part in a blameless on-call rotation.
Collaborate & Upskill: Share your IAM and security knowledge within a multidisciplinary team and across the wider engineering organization.
What they're looking for
- + years of hands-on Linux systems engineering in large-scale, high-availability production environments.
- A strong background in identity and access management, with a solid grasp of: security principles such as zero trust, least privilege, and just-in-time and just-enough access, and experience turning them into enforceable access policies.
- Hands-on experience operating production services on Kubernetes, identity and: access tooling such as Teleport, SPIFFE/SPIRE, HashiCorp Vault, or equivalents, and a good understanding of PKI, short-lived certificates, and mTLS.
- Deep knowledge of LDAP and the Linux authentication stack, including SSSD,: PAM, and SSH, as well as identity protocols such as OIDC, OAuth 2.0, and SAML.
