# Senior Linux System Engineer

**Company**: Adyen
**Location**: Amsterdam
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Category**: Engineering
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/adyen/jobs/8213364?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_a1e83ea0-538

## Description

You will join a multidisciplinary Infrastructure Engineering team that owns the core of Adyen's infrastructure: configuration management, mail infrastructure, and identity and access management.

Your main focus is the identity and access management layer of our infrastructure. You will make sure every person, system, and agent gets exactly the access they need, only when they need it, and that every access decision can be explained and audited.

Responsibilities:

- Identity & Access Management: Maintain and improve our IAM infrastructure for humans, systems, and AI agents across on-premise and cloud environments, using tools such as Teleport and SPIFFE/SPIRE.

- Zero Trust & Access Policies: Work with zero trust, just-in-time, and just-enough access principles across the infrastructure. Define, refine, and enforce the access policies and models behind them.

- Security & Compliance: Work closely with Security and Compliance teams on access reviews, audits, and hardening, and turn findings into concrete improvements.

- Core Infrastructure: Alongside IAM, support and maintain our other core infrastructure components, including LDAP, Puppet, Ansible, and our mail infrastructure, and keep them stable, secure, and low-maintenance.

- Support & Reliability: Act as an escalation point for access and infrastructure issues, help teams resolve and learn from incidents, and take part in a blameless on-call rotation.

- Collaborate & Upskill: Share your IAM and security knowledge within a multidisciplinary team and across the wider engineering organization.

Requirements:

- 8+ years of hands-on Linux systems engineering in large-scale, high-availability production environments.

- A strong background in identity and access management, with a solid grasp of security principles such as zero trust, least privilege, and just-in-time and just-enough access, and experience turning them into enforceable access policies.

- Hands-on experience operating production services on Kubernetes, identity and access tooling such as Teleport, SPIFFE/SPIRE, HashiCorp Vault, or equivalents, and a good understanding of PKI, short-lived certificates, and mTLS.

- Deep knowledge of LDAP and the Linux authentication stack, including SSSD, PAM, and SSH, as well as identity protocols such as OIDC, OAuth 2.0, and SAML.

- Experience with configuration management at scale (Puppet, Ansible) and with scripting or programming in Bash, Python, or Go.

- Clear communication skills, and the ability to explain access and security decisions to both technical and non-technical stakeholders.

- Hands-on experience with Infrastructure as Code (IaC).

Highly Desired Skills:

- Experience with IAM in a regulated environment such as financial services (PCI DSS, DORA).

- Experience with Attribute-Based Access Control (ABAC) systems.

- Familiarity with policy-as-code tools such as OPA, Cedar, RBAC.

## Skills

### Required
- Linux systems engineering
- Identity and access management
- Zero trust
- Kubernetes
- Teleport
- SPIFFE/SPIRE
- HashiCorp Vault
- LDAP
- Linux authentication stack
- SSSD
- PAM
- SSH
- OIDC
- OAuth 2.0
- SAML
- Configuration management
- Scripting
- Programming
- Infrastructure as Code

### Nice to have
- IAM in a regulated environment
- Attribute-Based Access Control
- Policy-as-code tools

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/adyen/jobs/8213364?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)