Middle Information Security Access Specialist

Why this role exists

This role exists to scale, secure, and automate user access management infrastructure, ensuring zero-trust integrity at high velocity. You’ll help protect the core IT ecosystem by eliminating manual access workflows, driving identity governance, and meeting strict operational SLAs.

What you’ll drive

Strategy & outcomes

• Enhance information security measures by conducting regular access audits for compliance with PCI DSS and ISO 27001 requirements.
• Measure and track operational SLAs, proactively fixing bottlenecks in the request pipeline to ensure high internal customer satisfaction.
• Participate in the optimization of operational processes by driving automation.

Discovery & decisions

• Validate and define role models across corporate systems, continuously identifying and correcting access anomalies or inconsistencies.
• Map and translate complex compliance and technical requirements into clean, automated access workflows.
• Partner with cross-functional teams to onboard new corporate systems into the centralized Access Flow platform.

Delivery & execution

• Deploy automation scripts (PowerShell, Bash) to eliminate repetitive data analysis tasks.
• Work with large volumes of data and utilize complex formulas within Google Spreadsheet.
• Process complex, escalated access tickets swiftly and securely, serving as the ultimate gatekeeper for critical permissions.
• Build and update comprehensive internal documentation for procedures, role definitions, and access frameworks.

What makes you a fit

Must-have

• 2+ years of hands-on experience in IT Security, IAM, or related technical roles (QA/AQA, IT Operations/Systems Administration, L2/L3 Support with a similar scope of tasks).
• Strong technical mastery of enterprise identity tools (e.g., Okta, CyberArk, Active Directory, PAM, and SSO solutions).
• Basic scripting skills (Bash, PowerShell, or Python) explicitly used for automating identity workflows or security tasks.
• Basic understanding of the requirements of PCI DSS and ISO 27001.
• Deep understanding of core access control principles, RBAC structures, and authentication methods.
• SLA-driven mindset with a track record of handling high-volume operational tickets without compromising security or accuracy.
• Clear communication style—able to translate rigid technical security policies into clear, non-technical steps for internal users.
• Fluency in Ukrainian or Russian; Intermediate+ level of English.

Nice-to-have

• Familiarity with cloud security concepts and identity governance within AWS, Azure, or GCP.
• Experience configuring or troubleshooting custom Access Flow / IAM orchestration platforms.
• Relevant industry certifications (e.g., CompTIA Security+, Okta Certified Professional, or Microsoft Identity and Access Administrator).

Benefits

• Benefits Cafeteria — annual budget for sports, medical, mental health, home office, and languages.
• Paid maternity/paternity leave and monthly childcare allowance.
• 20+ vacation days, unlimited sick leave, and emergency time off.
• Remote-first work, tech support, and coworking compensation.
• Team events (online, offline, and offsite).
• Internal courses and growth programs.

Culture & core values

The culture emphasizes trust, ownership, and a growth mindset, with open feedback, room to experiment, and team support.

• FUELLED BY TRUST: openness, honesty, and mutual support.
• OWN YOUR GAME: initiative and ownership.
• ACCELER8: moving fast, focusing smart, and keeping it simple.
• CHALLENGE ACCEPTED: growing through challenges and staying curious.
• BULLETPROOF: resilience, readiness, and planning.