Identity and Access Management Engineer at CoinsPaid (Remote)

CoinsPaid offers ready-to-use crypto payment solutions tailored to business’ every need. Standing at the forefront of mass adoption, our products help businesses gear up for the new era of digital assets. We showed a tremendous growth in terms of transactions and volumes since 2019 and in 2023 were marked by Forbes as the "Best Crypto Payment Gateway for High-Volume Transactions".

Headquartered in Estonia and having 3 international hubs, we are still a remote-first company with employees working from 30+ countries around the world. At CoinsPaid, we are passionate about crypto, fintech and are putting great effort into building a team that will get the world ready for every-day crypto use. If these feel close to you - give us a shout!

Responsibilities:

Process and fulfill access requests across SaaS and internal systems, maintaining least-privilege standards and proper approval trails

Manage Okta user lifecycle — provisioning, deprovisioning, group assignments, and application entitlements

Collect, organize, and deliver IAM evidence for internal and external audits (SOC 2, ISO 27001, or equivalent); maintain audit-ready documentation

Conduct periodic access reviews and certifications; track remediation to closure

Triage and resolve IAM-related tickets; escalate to Senior when scope requires it

Collaborate with HR, IT, and DevOps on joiner/mover/leaver workflows

Requirements:

2–4 years of experience in IAM, IT Security, or a related function

Hands-on experience with Okta or another IAM solution — user and group management, application assignments, MFA policy configuration

Solid understanding of IAM fundamentals: RBAC, least privilege, access lifecycle, separation of duties

Experience supporting audit or compliance processes — knowing what auditors ask for and how to produce it cleanly

Familiarity with PAM concepts (privileged accounts, credential vaulting, access review)2

Clear written communication — your tickets and runbooks should need no decoding

Nice to have:

Okta certifications (Okta Professional or Administrator)
Experience with IGA tooling (SailPoint, Saviynt, or similar)
Exposure to PAM platforms (CyberArk, BeyondTrust, Teleport
Fintech or regulated-industry background (banking, payments, insurance)
Familiarity with SOC 2 or ISO 27001 control frameworks from the evidence side

Identity and Access Management Engineer

Job Description

Responsibilities:

Requirements:

Nice to have:

About CoinsPaid