TBC Uzbekistan
We are TBC Uzbekistan, a digital financial ecosystem creating some of the most innovative financial services in Uzbekistan. Our team consists of over 4,000 employees from 28+ nationalities, and our products are used daily by 22+ million customers, making financial management simpler, more convenient, and accessible.
The ecosystem includes TBC Bank Uzbekistan – one of the country's largest digital banks, TBC Business for entrepreneurs and small businesses, payme – one of Uzbekistan's most popular payment apps, TBC Nasiya – a fast-growing installment service, BILLZ – a platform for retail trade automation, TBC Sug'urta – a new generation of digital insurance, as well as OLX – one of the largest online classifieds platforms in the country.
Your mission:
We are looking for an IAM Engineer to join the Workplace Engineering team, who will help develop and support identity and access management processes at TBC Uzbekistan. In this role, you will work with Microsoft Entra ID, Active Directory, and Microsoft 365, as well as participate in the implementation of One Identity and the automation of access management processes. Your task is to make the processes of granting, modifying, and revoking access more secure, transparent, and automated, while supporting the stable daily operation of the corporate IT environment.
Your role in the team:
- Manage the user account lifecycle (Joiner-Mover-Leaver) in Microsoft Entra ID and on-premises Active Directory
- Configure and maintain access management policies, including RBAC, Conditional Access, and the principle of least privilege
- Work with authentication and authorization mechanisms: SSO, MFA, federation, and password policies
- Administer Group Policy, security groups, Organizational Units (OU), and domain trusts
- Create, modify, and disable user accounts, mail aliases, distribution groups, and shared mailboxes in Microsoft 365 / Exchange Online
- Conduct regular access reviews and audits in accordance with information security and compliance requirements
- Participate in the integration of corporate applications with identity management systems via SSO and SCIM
- Monitor and investigate incidents related to access and identity, in collaboration with the information security team
- Participate in IT projects with the Workplace and Infrastructure teams: migrations, system updates, and automation of access management processes
- Maintain up-to-date documentation on IAM processes, configurations, access matrices, and incident response procedures
- Process access-related requests and incidents within established SLAs
- Control the correct assignment of roles and licenses in Microsoft 365, Entra ID, and connected corporate systems
Skills needed to join our team:
- Experience with Microsoft Entra ID (Azure AD) and Active Directory
- Practical experience in managing user account lifecycles and access
- Knowledge of RBAC, Conditional Access, and least privilege principles
- Experience with SSO, MFA, and federation protocols/technologies, such as SAML and OAuth
- Practical experience with Group Policy, security groups, and OUs
- Experience administering Microsoft 365 and Exchange Online
- Understanding of IAM and information security principles
- Experience with audits and regular access reviews
- Troubleshooting and problem-solving skills related to access and identity
- Ability to document processes, configurations, and technical solutions
Will be a plus:
- Experience with One Identity
- Experience integrating corporate systems via SSO / SCIM
- Experience automating provisioning / deprovisioning processes
- Experience integrating Entra ID / Active Directory with corporate applications
- Experience collaborating with Information Security teams and participating in compliance projects
What we offer:
💰 Reward and bonuses
- Competitive salary and annual bonus based on KPI results.
- Corporate discounts and special offers from partner companies.
🌟 Flexibility and work-life balance
- Hybrid work format with the ability to work from anywhere in the world for 24 days a year.
- 27 calendar days of paid leave.
- An extra day off on your birthday, as well as 2 paid days for parents to care for children.
- Flexible working hours: 09:00–18:00 or 10:00–19:00.
❤️ Well-being and development
- Fresh fruits and seasonal treats in the office.
- Access to Udemy and an internal educational platform with over 1,600 courses.
- Professional training and workshops to develop both technical and soft skills.
🎉 Corporate culture
- Corporate events, team meetings, celebrations, championships, and wellness initiatives that help us remain an active and cohesive team.
- Sports clubs: yoga, football, and basketball.
Join our team and help improve the financial experience of millions of users!
