Senior Engineer - IAM and Workplace Technology

An Introduction to Primer

Primer is the unified infrastructure for global payments. We give finance and payments teams the visibility and control to reduce complexity, improve performance, and capture more revenue — all from a single platform.

Backed by Sofina, Peak XV Partners, ICONIQ, Tencent, Accel, and Balderton, we're building the payments layer the world's best companies rely on.

Which team will you be joining?

You'll join Tech as a Senior Engineer. Tech owns identity and access, IT and workplace technology for the whole company. Today it's a Workplace Tech engineer and an IAM engineer, and you'll be the most senior engineer on the team.

This is a hands-on role. You'll work the access and IT queue with the team, and you'll lead the technical work that shrinks it: the automation, the identity platform and the roadmap. As Primer grows and the team grows with it, there's room for the role to grow too, including into leading the team for the right person.

Tech is an enablement team. It sits alongside Security Engineering, not inside it, and owns the request queue and the tools that keep everyone at Primer productive. Primer is growing fast, and access requests are growing even faster. Our job is to make getting the right access quick, safe and mostly automatic, so people can get on with their work and our security engineers can get back to security.

What you'll be doing

• Work the IAM, IT and Workplace Tech queue alongside the team, and set the bar for turnaround and quality.
• Lead the technical roadmap for Tech and deliver it, starting with SCIM day-1 provisioning, Okta, automated access reviews and device enrolment.
• Automate the routine. Use identity tooling, scripting, workflow automation and AI to take repetitive access requests off people's plates.
• Run joiner, mover and leaver processes so new starters have what they need on day one and access is removed promptly when it should be.
• Keep access controls audit-ready. Work with Security and GRC on access reviews, least privilege and evidence for PCI DSS and SOC 2.
• Partner with Security Engineering on the calls that need them, such as privileged access and policy exceptions, and handle the rest within Tech.
• Mentor the other engineers on the team, review their work and share what you know.
• Track and report on how the queue is doing: volume, turnaround, and how much automation is taking off it.

What we're looking for

• Senior-level experience in IT, IAM or corporate engineering at a fast-growing tech company
• Hands-on with an identity provider (Okta preferred; Entra ID, Google Workspace or similar also welcome), including SSO, SCIM and lifecycle management
• A track record of automating manual IT and access work, with scripting, workflow tools or APIs
• Experience with SaaS administration and endpoint management (e.g. Jamf, Kandji, Intune)
• Good judgement about access: you understand least privilege and know when something needs a security review
• Experience owning projects end to end and helping others on the team level up
• Clear, friendly written communication. Much of the job is helping colleagues across the business

Nice to have

• Experience in fintech, payments or another regulated environment (PCI DSS, SOC 2, ISO 27001)
• Experience running access reviews and providing audit evidence
• Using AI tools to speed up support and operations work
• Experience scaling an IT function through a period of fast headcount growth