Software Engineer - Identity & Access
at Wise
Posted a day ago
No clicks
- Compensation
- €4,250 – €5,550 EUR
- City
- Tallinn
- Country
- Estonia
Currency: € (EUR)
Responsible for designing, implementing and operating identity lifecycle and access governance systems to support Wise's internal security and scaling needs. You'll administer Okta and integrate third-party systems (SSO, SCIM), build automation and tooling (Python preferred), and define policies for MFA and conditional access. The role partners closely with Security, Support and Engineering teams to respond to incidents, support audits, runbooks and DR exercises, and enable global support with training and escalation.
Software Engineer - Identity & Access
- __vacancyopjusttionswidget.opt-Team__Technology document.body.className += " team-technology";
- __vacancyopjusttionswidget.opt-Locations__Tallinn document.body.className += " locations-tallinn";
Wise is a global technology company, building the best way to move and manage the world’s money.
Min fees. Max ease. Full speed.
Whether people and businesses are sending money to another country, spending abroad, or making and receiving international payments, Wise is on a mission to make their lives easier and save them money.
As part of our team, you will be helping us create an entirely new network for the world's money.
For everyone, everywhere.
More about our mission and what we offer.
What you’ll be doing
As an IAM Engineer, you’ll ensure our identity and access management is fit for purpose, support our global Support teams, and help Wise scale. You’ll work closely with our Security team to respond to incidents and support audits involving access management. The IAM team partners with teams across Wise to scale our internal systems—keeping them secure and user‑friendly—so everyone can move without obstacles.
Your day-to-day:
Design, implement, and operate identity lifecycle and access governance (IAG): joiner/mover/leaver, role-based access control (RBAC) and least privilege, access reviews and certifications.
Administer Okta as our identity provider (IdP) and manage third‑party integrations using both out‑of‑the‑box features and custom work, including SSO via SAML and OIDC/OAuth2, and provisioning via SCIM.
Build automation and internal tooling (Python preferred) to improve process efficiency and reduce manual work.
Define and maintain policies for MFA, device posture, and conditional access; ensure authentication and authorisation follow best practice.
Collaborate with Security on incident response and investigations; support audits and evidence collection related to access management.
Create and maintain clear documentation, runbooks, and diagrams; participate in disaster recovery (DR) planning and exercises.
Propose and implement improvements, modify configurations, and update internal tools through code review, change control, and CI/CD.
Enable Support teams globally with training, playbooks, and tooling; act as an escalation point for complex issues.
Work closely with Technicians, Engineers, and Delivery Managers to implement security policies according to best practice.
The experience you’ll need:
Proficiency in at least one programming language and scripting (Python preferred) to automate IAM workflows and integrations.
Hands-on experience with an enterprise IdP (Okta preferred) and modern authentication/authorisation standards (SAML, OIDC/OAuth2, SCIM).
Experience operating IAM at scale, including lifecycle automation and access governance.
Strong communicator who can drive cross‑team projects, ask the right questions, and bring work to completion.
Ownership mindset, curiosity, and a problem‑solving approach.
Typically 3+ years of relevant IAM/IT engineering experience, or equivalent practical experience. We value skills and impact over years.
Bonus skills / experience:
DevOps practices (Git, CI/CD, observability) and infrastructure as code (e.g., Terraform); configuration as code for identity systems.
Low/no‑code automation platforms (e.g., Okta Workflows, Workato, Zapier) and iPaaS patterns.
Privileged access management (PAM) and secrets management.
Experience with audits and compliance frameworks (e.g., ISO 27001, SOC 2, SOX)
Relevant certifications
For everyone, everywhere. We're people building money without borders — without judgement or prejudice, too. We believe teams are strongest when they are diverse, equitable and inclusive.
We're proud to have a truly international team, and we celebrate our differences.
Inclusive teams help us live our values and make sure every Wiser feels respected, empowered to contribute towards our mission and able to progress in their careers.
If you want to find out more about what it's like to work at Wise visit Wise.Jobs.
Keep up to date with life at Wise by following us on LinkedIn and Instagram.
Wise is a global technology company, building the best way to move and manage the world’s money.
\nMin fees. Max ease. Full speed.
Whether people and businesses are sending money to another country, spending abroad, or making and receiving international payments, Wise is on a mission to make their lives easier and save them money.
As part of our team, you will be helping us create an entirely new network for the world's money.
\nFor everyone, everywhere.
More about our mission and what we offer.
What you’ll be doing
As an IAM Engineer, you’ll ensure our identity and access management is fit for purpose, support our global Support teams, and help Wise scale. You’ll work closely with our Security team to respond to incidents and support audits involving access management. The IAM team partners with teams across Wise to scale our internal systems—keeping them secure and user‑friendly—so everyone can move without obstacles.
\n
\n
Your day-to-day:
Design, implement, and operate identity lifecycle and access governance (IAG): joiner/mover/leaver, role-based access control (RBAC) and least privilege, access reviews and certifications.
Administer Okta as our identity provider (IdP) and manage third‑party integrations using both out‑of‑the‑box features and custom work, including SSO via SAML and OIDC/OAuth2, and provisioning via SCIM.
Build automation and internal tooling (Python preferred) to improve process efficiency and reduce manual work.
Define and maintain policies for MFA, device posture, and conditional access; ensure authentication and authorisation follow best practice.
Collaborate with Security on incident response and investigations; support audits and evidence collection related to access management.
Create and maintain clear documentation, runbooks, and diagrams; participate in disaster recovery (DR) planning and exercises.
Propose and implement improvements, modify configurations, and update internal tools through code review, change control, and CI/CD.
Enable Support teams globally with training, playbooks, and tooling; act as an escalation point for complex issues.
Work closely with Technicians, Engineers, and Delivery Managers to implement security policies according to best practice.
The experience you’ll need:
Proficiency in at least one programming language and scripting (Python preferred) to automate IAM workflows and integrations.
Hands-on experience with an enterprise IdP (Okta preferred) and modern authentication/authorisation standards (SAML, OIDC/OAuth2, SCIM).
Experience operating IAM at scale, including lifecycle automation and access governance.
Strong communicator who can drive cross‑team projects, ask the right questions, and bring work to completion.
Ownership mindset, curiosity, and a problem‑solving approach.
Typically 3+ years of relevant IAM/IT engineering experience, or equivalent practical experience. We value skills and impact over years.
Bonus skills / experience:
DevOps practices (Git, CI/CD, observability) and infrastructure as code (e.g., Terraform); configuration as code for identity systems.
Low/no‑code automation platforms (e.g., Okta Workflows, Workato, Zapier) and iPaaS patterns.
Privileged access management (PAM) and secrets management.
Experience with audits and compliance frameworks (e.g., ISO 27001, SOC 2, SOX)
Relevant certifications
For everyone, everywhere. We're people building money without borders — without judgement or prejudice, too. We believe teams are strongest when they are diverse, equitable and inclusive.
We're proud to have a truly international team, and we celebrate our differences.
\nInclusive teams help us live our values and make sure every Wiser feels respected, empowered to contribute towards our mission and able to progress in their careers.
If you want to find out more about what it's like to work at Wise visit Wise.Jobs.
Keep up to date with life at Wise by following us on LinkedIn and Instagram.
","datePosted":"2026-01-08T08:24:37+00:00","validThrough":"2126-01-08T08:24:37+00:00","employmentType":[],"hiringOrganization":{"@type":"Organization","name":"Wise","image":"","logo":"","sameAs":"https://wise.jobs","url":"https://wise.jobs"},"industry":["Technology"],"jobBenefits":"4250 - 5550 EUR Monthly","identifier":{"@type":"PropertyValue","name":"Wise","value":"72d149b5-30f1-4624-a306-5124d677d8ec"},"jobLocation":[{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Tallinn"}}]}
Find out more about what we offer our employees
From me days to mission days, sabbaticals to stock, and everything in between. For everyone, everywhere. We’re people building money without borders. Find out what you'll get if you join us.
What we offer
Software Engineer - Identity & Access
- __vacancyopjusttionswidget.opt-Locations__Tallinn document.body.className += " locations-tallinn";
