Senior Linux System Engineer - IAM
Senior Linux engineer on Adyen's core infrastructure team in Amsterdam, focused on identity and access management (zero trust, just-in-time access, Teleport, SPIFFE/SPIRE) for humans, systems, and AI agents, while also maintaining LDAP, Puppet/Ansible config management, and mail infrastructure. Office-first role based in the Amsterdam office.
- Compensation
- Not disclosed
- Location
- Amsterdam
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 8+ years
- Category
- Security
- Posted
Skills
Must have
- 8+ years of hands-on Linux systems engineering in large-scale, high-availability production environments
- Strong background in identity and access management and security principles (zero trust, least privilege, just-in-time and just-enough access), with experience turning them into enforceable access pol
- Hands-on experience operating production services on Kubernetes
- Hands-on experience with IAM tooling such as Teleport, SPIFFE/SPIRE, or HashiCorp Vault
- Good understanding of PKI, short-lived certificates, and mTLS
- Deep knowledge of LDAP and the Linux authentication stack (SSSD, PAM, SSH)
- Knowledge of identity protocols such as OIDC, OAuth 2.0, and SAML
- Experience with configuration management at scale (Puppet, Ansible)
- Scripting or programming experience in Bash, Python, or Go
- Hands-on experience with Infrastructure as Code (IaC)
- Clear communication skills; able to explain access and security decisions to technical and non-technical stakeholders
Nice to have
- Experience with IAM in a regulated environment such as financial services (PCI DSS, DORA)
- Experience with Attribute-Based Access Control (ABAC) systems
- Familiarity with policy-as-code tools such as OPA, Cedar, RBAC
Full description
This is Adyen
Adyen provides payments, data, and financial products in a single solution for customers like Meta, Uber, H&M, and Microsoft - making us the financial technology platform of choice. At Adyen, everything we do is engineered for ambition.
For our teams, we create an environment with opportunities for our people to succeed, backed by the culture and support to ensure they are enabled to truly own their careers. We are motivated individuals who tackle unique technical challenges at scale and solve them as a team. Together, we deliver innovative and ethical solutions that help businesses achieve their ambitions faster.
Senior Linux System Engineer
You will join a multidisciplinary Infrastructure Engineering team that owns the core of Adyen's infrastructure: configuration management, mail infrastructure, and identity and access management. These components sit underneath everything we do. Every engineer, system, and service at Adyen depends on them working reliably and securely.
We are looking for a Senior Linux Engineer with a strong background in identity and access management and security principles, who can strengthen the team and help us keep our infrastructure secure. Zero trust, just-in-time and just-enough access, and clear access policies are central to how we work. Our IAM landscape covers humans, systems, and increasingly AI agents, across on-premise and cloud environments, from small clusters to some of our largest platforms.
If you are an experienced Linux engineer who thinks like an attacker, cares about getting access right, and enjoys owning critical systems in production, this role is for you.
What You'll Do
Your main focus is the identity and access management layer of our infrastructure. You will make sure every person, system, and agent gets exactly the access they need, only when they need it, and that every access decision can be explained and audited.
- Identity & Access Management: Maintain and improve our IAM infrastructure for humans, systems, and AI agents across on-premise and cloud environments, using tools such as Teleport and SPIFFE/SPIRE.
- Zero Trust & Access Policies: Work with zero trust, just-in-time, and just-enough access principles across the infrastructure. Define, refine, and enforce the access policies and models behind them.
- Security & Compliance: Work closely with Security and Compliance teams on access reviews, audits, and hardening, and turn findings into concrete improvements.
- Core Infrastructure: Alongside IAM, support and maintain our other core infrastructure components, including LDAP, Puppet, Ansible, and our mail infrastructure, and keep them stable, secure, and low-maintenance.