IAM Engineer

Kyiv, Ukraine

About the Position

HOLYWATER TECH is a technology company that creates entertainment products at the intersection of human creativity and artificial intelligence. They are examples of AI-native platforms that redefine storytelling and enable anyone to become a creator. The ecosystem of HOLYWATER TECH products includes:

→ My Drama - a streaming platform for vertical series, #1 among European and American companies in the niche

→ My Passion - a digital library of books #1 in more than 10 countries

→ My Muse - a platform for AI-generated series, opening a new era of storytelling

About the Company

HOLYWATER TECH today is:

• Over 100+ million app downloads
• Strategic partnership with FOX Entertainment
• Double annual growth in 2024-2025
• 30+ international awards, including Muse Creative, W3, Telly, Runway AI Film Festival, Lovie
• Over 100 million hours of user-viewed and read content
• Leading positions in their niches in the US and European markets

We create new formats, stories, and build a world where the only limitation is human imagination. And now we are looking for an IAM Engineer who is ready to join and create it with us.

Your Mission

• Design and develop IAM architecture (Okta or similar IdP): SSO (SAML / OIDC), SCIM provisioning, groups, RBAC, lifecycle, MFA / passkeys.
• Build and maintain access model and governance: least-privilege, RBAC matrix, quarterly access reviews, full cycle joiner / mover / leaver (including quality offboarding).
• Develop Zero Trust approach: conditional access, device trust, and MDM management (e.g., Mosyle / Jamf) and device policies.
• Administer the identity component of corporate SaaS (Google Workspace, Slack, etc.): accounts, domains, SSO integrations; manage access and account migrations between domains.
• Enhance identity and domain security: protection against account takeover, phishing-resistant MFA, security posture of corporate mail and domains.
• Automate IAM processes (provisioning / deprovisioning) through API and scripts (n8n / Make).
• Document processes, act as a technical reference for the team.

Requirements

• 3-4+ years in Identity & Access Management or a related IT security role.
• Practical experience with access management systems / IdP (Okta, Microsoft Entra ID / Azure AD, OneLogin, Ping, Keycloak, etc.)
• Deep understanding of IAM practices: SSO (SAML / OIDC), provisioning (SCIM), RBAC, lifecycle, MFA.
• Experience with access governance: least-privilege, access reviews, on / offboarding.
• Understanding of Zero Trust and device management (MDM / device trust).
• Administration of corporate SaaS at the identity / account level (Google Workspace, etc.).
• Experience with API and automation (n8n / Make / scripts).
• Experience administering AI tools (Claude / LLM) in a corporate environment and using these tools in your work.

Nice to Have

• Experience with Okta.
• Experience with infrastructure / tenant migrations (Google Workspace, Slack, accounts between domains).
• Certifications (Okta, CompTIA Security+, etc.).
• Compliance (SOC 2 / ISO 27001).
• Cloud security (AWS IAM).
• 1Password or similar secrets managers.

We Offer

• Rapid professional growth. We build an environment where development is the norm: lectures, libraries, hackathons, schools. We compensate for professional training and learning any language, including Ukrainian.
• Work format of your choice. You can work from home, in the office on Kyiv's Podil, or in Lviv (generators, shelters, lunches, snacks - all inclusive), or abroad - we have several offices there.
• Equipment and services. Everything you need for work.
• Vacation. 20 days of vacation + public holidays and unlimited sick leave.
• Care for body and mind. We compensate for sports, health insurance in Ukraine (after probation), corporate doctor services, and mental health support.

Why is it great with us?

• Real impact. Your decisions directly affect 100+ million users - their experience, emotions, and time in the product.
• Live culture. We create an environment where you can experiment and try new things. The average response score to the question "How much do you like working at HOLYWATER?" according to eNPS is 9.23/10.
• Autonomy. We trust the team's decisions: minimal micromanagement, maximum space for initiative and impact.
• Strong people around. We constantly challenge the status quo and achieve new heights. Thinking differently and striving for more is supported here.

Perhaps this is your chance to become our next big name?

Want to know more about HOLYWATER TECH? Check this out:

How HOLYWATER TECH works - on Vector Media

Partnership with Dhar Mann Studios and FOX Entertainment

Interview with co-CEO Bohdan Nesvit about the FOX Entertainment partnership for Forbes

About vertical series that are changing the industry - in Detector Media

Our Instagram and LinkedIn - to stay updated on everything happening with us

Do you want to create history with us at HOLYWATER TECH?

Apply for the vacancy!