Identity and Access Management (IAM) Engineer

Primer is the unified infrastructure for global payments, providing finance and payments teams with visibility and control to reduce complexity, improve performance, and capture more revenue from a single platform. Backed by top-tier investors, Primer is building the payments layer relied upon by the world’s best companies.

About the Role

You're joining the Security team at a critical growth stage. The role focuses on Identity and Access Management (IAM), bridging GRC (Governance, Risk, and Compliance) and Workplace Technology. This position is pivotal in managing the day-to-day IAM provisioning queue while building automation to streamline operations.

You’ll report to the Head of Security and collaborate closely with GRC, Workplace Technology, engineering, compliance, and infrastructure teams. Unlike isolated security roles, this position emphasizes partnership-driven problem-solving to ensure scalable provisioning and access governance.

Key Responsibilities

• Stabilize and own the IAM request queue as the company scales. Prioritize urgent requests, establish a baseline for time-to-resolution, and ensure scalability as the company grows.

• Design and implement SCIM auto-provisioning flows for day-one account setup across SaaS tools. Own the end-to-end process from requirements to troubleshooting, reducing manual workload.

• Develop the IAM enrolment improvements roadmap, including finalizing Mac/Windows enrolment, partnering on a future Okta rollout, and building fallback workflows in Tines. Collaborate with engineering and infrastructure teams to meet deadlines.

• Partner with GRC to run automated access reviews and certification campaigns. Design workflows, maintain data pipelines, and aim for measurable reductions in standing access and access sprawl.

• Progress IAM-related technical debt and risk mitigation. Lead Just-In-Time (JIT) and Privileged Access Management (PAM) initiatives, collect evidence for least-privilege audits, and advance the automation roadmap for context-aware access.

• Reduce identity and provisioning load on the Workplace Technology team, allowing them to focus on IT support, device management, and people systems.

Requirements

• Proven experience shipping identity or access management systems in production, preferably in fintech, security-focused companies, or infrastructure-heavy environments. Familiarity with Okta (or similar IDPs), SCIM provisioning, access review workflows, and scaling identity systems.

• Strong skills in building automation using Python, Go, or similar, and integrating tools like Tines, Okta, and cloud IAM services. Understanding of least-privilege principles, deprovisioning, and audit trails is essential.

• Demonstrated operational ownership. Ability to prioritize tasks, manage backlogs, and decide what requires immediate attention versus engineering support.

• Capacity to learn Primer’s specific stack and people-systems quickly. Focus on reasoning through access problems and translating business requirements into functional systems.

• Excellent collaboration skills with non-engineering functions, including GRC, People, compliance, and engineering. Must be curious about cross-functional needs and solutions.

What to Expect

• Initial growth challenges in IAM automation, requiring patience and long-term planning to shrink the queue.

• Ambiguity in the roadmap as GRC and Workplace Technology evolve. Need to adapt priorities and scope as business needs shift.

• Focus on automation over headcount. Build scalable systems rather than managing a team.

• Remote-first and globally distributed work environment. Sole ownership of the domain requires strong documentation and trust-building across asynchronous channels.

Interview Process

• Intro call with a Talent Partner

• Interview with the Hiring Manager

• Challenge Stage – Contextualized to the role

• Final values-alignment interview

Culture at Primer

Primer fosters a culture where employees can excel and take pride in their impact. The team is mission-driven, collaborative, and committed to building exceptional products and achieving success for merchants. Remote work is central to Primer’s ethos, with strong remote practices, workations, an annual company retreat, and access to co-working spaces globally.

The work is challenging but supported by robust onboarding, a collaborative environment, and a team invested in individual success.

Benefits

• Fully remote and globally distributed work model

• Competitive share options

• Uncapped holiday with a minimum of 25 days

• Access to co-working spaces in major cities

• Workations and company retreat

• Top-tier equipment for your role

• £500 towards home office setup

• Generous learning budget

• Private Medical Insurance

• Additional perks and benefits depending on location

Diversity and Inclusion

Primer is committed to building a diverse, inclusive, and authentic workplace. If your experience doesn’t perfectly match the requirements, we encourage you to apply. Equal treatment and zero-tolerance for discrimination are core values.