IAM Engineer

HOLYWATER TECH is a technology company that creates entertainment products at the intersection of human creativity and artificial intelligence. They are examples of AI-native platforms that are rethinking storytelling and empowering anyone to become a creator. The HOLYWATER TECH product ecosystem includes:

→ My Drama — a streaming platform for vertical series, №1 among European and American companies in the niche

→ My Passion — a digital book library №1 in over 10 countries worldwide

→ My Muse — a platform for AI-generated series, ushering in a new era of storytelling

HOLYWATER TECH TODAY IS:

• over 100 million app downloads
• a strategic partnership with FOX Entertainment
• 2x annual company growth for 2024-2025
• 30+ international awards, including Muse Creative, W3, Telly, Runway AI Film Festival, Lovie
• over 100 million hours of content watched and read by users
• leading positions in their niches in the US and European markets

We are creating new formats, stories, and building a world where the only limit is human imagination. And now we are looking for an IAM Engineer who is ready to join and create it with us.

YOUR MISSION:

• Design and develop IAM architecture (Okta or similar IdP): SSO (SAML / OIDC), SCIM provisioning, groups, RBAC, lifecycle, MFA / passkeys.
• Build and maintain an access and governance model: least-privilege, RBAC matrix, quarterly access reviews, full joiner / mover / leaver cycle (including quality offboarding).
• Develop the Zero Trust approach: conditional access, device trust, and MDM management (e.g., Mosyle / Jamf) and device policies.
• Administer the identity component of corporate SaaS (Google Workspace, Slack, etc.): accounts, domains, SSO integrations; manage access and account migrations between domains.
• Enhance identity and domain security: protection against account takeover, phishing-resistant MFA, secure setup of corporate email and domains.
• Automate IAM processes (provisioning / deprovisioning) via API and scripts (n8n / Make).
• Document processes, act as a technical reference for the team.

FOR THIS YOU WILL NEED THESE SKILLS AND EXPERIENCE:

• 3-4+ years in Identity & Access Management or a related IT security role.
• Hands-on experience with access management systems / IdP (Okta, Microsoft Entra ID / Azure AD, OneLogin, Ping, Keycloak, etc.)
• Deep understanding of IAM practices: SSO (SAML / OIDC), provisioning (SCIM), RBAC, lifecycle, MFA.
• Experience with access governance: least-privilege, access reviews, on / offboarding.
• Understanding of Zero Trust and device management (MDM / device trust).
• Administration of corporate SaaS at the identity / accounts level (Google Workspace, etc.).
• Experience with APIs and automation (n8n / Make / scripts).
• Experience administering AI tools (Claude / LLM) in a corporate environment and specifically using these tools in your work.

Nice to have:

• Experience specifically with Okta.
• Experience with infrastructure / tenant migrations (Google Workspace, Slack, accounts between domains).
• Certifications (Okta, CompTIA Security+, etc.).
• Compliance (SOC 2 / ISO 27001).
• Cloud security (AWS IAM).
• 1Password or similar secrets managers.

WHAT YOU WILL GET FROM US:

• Fast professional growth. We build an environment where development is the norm: lectures, libraries, hackathons, schools. We compensate for professional training and learning any language, including Ukrainian.
• Work format of your choice. You can work from home, in our office in Kyiv's Podil or Lviv (generators, bomb shelters, lunches, snacks — all inclusive), or abroad — we have several offices there too.
• Equipment and services. Everything you need for work.
• Rest. 20 days of vacation + official holidays and unlimited sick leave.
• Care for body and mind. We compensate for sports, medical insurance in Ukraine (after probation), corporate doctor services, and mental health support.

WHY IS IT GREAT WITH US?

• Real impact. Your decisions directly affect 100+ million users — their experience, emotions, and time in the product.
• Vibrant culture. We create an environment where you can experiment and try new things. Average rating for the question “How much do you enjoy working at HOLYWATER?” based on eNPS results — 9.23/10.
• Autonomy. We trust the team's decisions: minimum micromanagement, maximum space for initiative and influence.
• Strong people around. We constantly challenge the status quo and reach new heights. Thinking differently and striving for more is supported here.

Perhaps this is your chance to become our next big name?

WANT TO KNOW MORE ABOUT HOLYWATER TECH? CHECK THIS OUT:

How HOLYWATER TECH Works — on Vector Media

Partnership with Dhar Mann Studios and FOX Entertainment

Interview with Co-CEO Bohdan Nesvit about FOX Entertainment Partnership for Forbes

About Vertical Series That Are Changing the Industry — in Detector Media

Our Instagram and LinkedIn — to stay updated on everything happening with us

Want to create history with us at HOLYWATER TECH?

Apply for the vacancy!