Software Engineer - Identity & Access

Location: Tallinn, ee

Company Description

Wise is a global technology company, building the best way to move and manage the world’s money.
Min fees. Max ease. Full speed.

Whether people and businesses are sending money to another country, spending abroad, or making and receiving international payments, Wise is on a mission to make their lives easier and save them money.

As part of our team, you will be helping us create an entirely new network for the world's money.
For everyone, everywhere.

More about our mission and what we offer.

Job Description

What you’ll be doing

As an IAM Engineer, you’ll ensure our identity and access management is fit for purpose, support our global Support teams, and help Wise scale. You’ll work closely with our Security team to respond to incidents and support audits involving access management. The IAM team partners with teams across Wise to scale our internal systems—keeping them secure and user‑friendly—so everyone can move without obstacles.

 

Your day-to-day:

• Design, implement, and operate identity lifecycle and access governance (IAG): joiner/mover/leaver, role-based access control (RBAC) and least privilege, access reviews and certifications.

• Administer Okta as our identity provider (IdP) and manage third‑party integrations using both out‑of‑the‑box features and custom work, including SSO via SAML and OIDC/OAuth2, and provisioning via SCIM.

• Build automation and internal tooling (Python preferred) to improve process efficiency and reduce manual work.

• Define and maintain policies for MFA, device posture, and conditional access; ensure authentication and authorisation follow best practice.

• Collaborate with Security on incident response and investigations; support audits and evidence collection related to access management.

• Create and maintain clear documentation, runbooks, and diagrams; participate in disaster recovery (DR) planning and exercises.

• Propose and implement improvements, modify configurations, and update internal tools through code review, change control, and CI/CD.

• Enable Support teams globally with training, playbooks, and tooling; act as an escalation point for complex issues.

• Work closely with Technicians, Engineers, and Delivery Managers to implement security policies according to best practice.

Qualifications

The experience you’ll need:

• Proficiency in at least one programming language and scripting (Python preferred) to automate IAM workflows and integrations.

• Hands-on experience with an enterprise IdP (Okta preferred) and modern authentication/authorisation standards (SAML, OIDC/OAuth2, SCIM).

• Experience operating IAM at scale, including lifecycle automation and access governance.

• Strong communicator who can drive cross‑team projects, ask the right questions, and bring work to completion.

• Ownership mindset, curiosity, and a problem‑solving approach.

• Typically 3+ years of relevant IAM/IT engineering experience, or equivalent practical experience. We value skills and impact over years.

Bonus skills / experience:

• DevOps practices (Git, CI/CD, observability) and infrastructure as code (e.g., Terraform); configuration as code for identity systems.

• Low/no‑code automation platforms (e.g., Okta Workflows, Workato, Zapier) and iPaaS patterns.

• Privileged access management (PAM) and secrets management.

• Experience with audits and compliance frameworks (e.g., ISO 27001, SOC 2, SOX)

• Relevant certifications

Additional Information

For everyone, everywhere. We're people building money without borders  — without judgement or prejudice, too. We believe teams are strongest when they are diverse, equitable and inclusive.

We're proud to have a truly international team, and we celebrate our differences.
Inclusive teams help us live our values and make sure every Wiser feels respected, empowered to contribute towards our mission and able to progress in their careers.

If you want to find out more about what it's like to work at Wise visit Wise.Jobs.

Keep up to date with life at Wise by following us on LinkedIn and Instagram.