Senior Linux System Engineer

Join Adyen, a leading global payment company, as a Senior Linux System Engineer. In this role, you will be part of a multidisciplinary Infrastructure Engineering team responsible for the core of Adyen's infrastructure, including configuration management, mail infrastructure, and identity and access management. You will focus on maintaining and improving the identity and access management layer of our infrastructure, ensuring secure and reliable access for all users, systems, and agents. Additionally, you will support and maintain other core infrastructure components and act as an escalation point for access and infrastructure issues.

• Maintenir et améliorer l'infrastructure de gestion des identités et des accès (IAM) pour les humains, les systèmes et les agents d'IA.
• Travailler avec des principes de sécurité tels que le zéro confiance, l'accès juste à temps et l'accès juste suffisant, et définir, affiner et appliquer les politiques d'accès.
• Agir en tant que point d'escalade pour les problèmes d'accès et d'infrastructure, aider les équipes à résoudre et à apprendre des incidents.

• Experience with configuration management at scale (Puppet, Ansible) and with scripting or programming in Bash, Python, or Go
• 8+ years of hands-on Linux systems engineering in large-scale, high-availability production environments
• Deep knowledge of LDAP and the Linux authentication stack, including SSSD, PAM, and SSH, as well as identity protocols such as OIDC, OAuth 2.0, and SAML
• You are security-minded and think about how something can be abused before it ships. You prefer simple, reliable solutions over clever ones, and you take ownership of problems until they are solved. You enjoy working in a team with mixed expertise, you share what you know, and you keep learning as identity, security, and AI continue to evolve
• A strong background in identity and access management, with a solid grasp of security principles such as zero trust, least privilege, and just-in-time and just-enough access, and experience turning them into enforceable access policies
• Hands-on experience with Infrastructure as Code (IaC)
• Hands-on experience operating production services on Kubernetes, identity and access tooling such as Teleport, SPIFFE/SPIRE, HashiCorp Vault, or equivalents, and a good understanding of PKI, short-lived certificates, and mTLS
• Clear communication skills, and the ability to explain access and security decisions to both technical and non-technical stakeholders
• Familiarity with policy-as-code tools such as OPA, Cedar, RBAC
• Experience with Attribute-Based Access Control (ABAC) systems
• Experience with IAM in a regulated environment such as financial services (PCI DSS, DORA)