Middle Information Security Access Specialist

What you’ll drive:

• Strategy & outcomes: Enhance information security measures by conducting regular access audits for compliance with PCI DSS and ISO 27001 requirements.
• Measure and track operational SLAs, proactively fixing bottlenecks in the request pipeline to ensure high internal customer satisfaction.
• Participate in the optimization of operational processes by driving automation.

• Discovery & decisions: Validate and define role models across corporate systems, continuously identifying and correcting access anomalies or inconsistencies.
• Map and translate complex compliance and technical requirements into clean, automated access workflows.
• Partner with cross-functional teams to onboard new corporate systems into the centralized Access Flow platform.

• Delivery & execution: Deploy automation scripts (PowerShell, Bash) to eliminate repetitive data analysis tasks.
• Work with large volumes of data and utilize complex formulas within Google Spreadsheet.
• Process complex, escalated access tickets swiftly and securely, serving as the ultimate gatekeeper for critical permissions.
• Build and update comprehensive internal documentation for procedures, role definitions, and access frameworks.

What makes you a GR8 fit:

• Must-have:
• 2+ years of hands-on experience in IT Security, IAM, or related technical roles (QA/AQA, IT Operations/Systems Administration, L2/L3 Support with a similar scope of tasks).
• Strong technical mastery of enterprise identity tools (e.g., Okta, CyberArk, Active Directory, PAM, and SSO solutions).
• Basic scripting skills (Bash, PowerShell, or Python) explicitly used for automating identity workflows or security tasks.
• Basic understanding of the requirements of PCI DSS and ISO 27001.
• Deep understanding of core access control principles, RBAC structures, and authentication methods.
• SLA-driven mindset with a track record of handling high-volume operational tickets without compromising security or accuracy.
• Clear communication style—able to translate rigid technical security policies into clear, non-technical steps for internal users.
• Fluency in Ukrainian or Russian; Intermediate+ level of English.

• Nice-to-have:
• Familiarity with cloud security concepts and identity governance within AWS, Azure, or GCP.
• Experience configuring or troubleshooting custom Access Flow / IAM orchestration platforms.
• Relevant industry certifications (e.g., CompTIA Security+, Okta Certified Professional, or Microsoft Identity and Access Administrator).

Why you’ll love working here:

• Benefits: Cafeteria — annual budget you allocate to: Sports • Medical • Mental health • Home office • Languages.
• Work-life & support: Paid maternity/paternity leave + monthly childcare allowance. 20+ vacation days, unlimited sick leave, emergency time off. Remote-first + tech support + coworking compensation. Team events (online/offline/offsite). Learning culture with internal courses + growth programs.
• Our culture & core values: GR8_TECH culture is how we win — through trust, ownership, and a growth mindset. We move fast, stay curious, and keep it real, with open feedback, room to experiment, and a team that’s got your back. FUELLED BY TRUST: we’re open, honest, and have each other’s backs. OWN YOUR GAME: we take initiative and own what we do. ACCELER8: we move fast, focus smart, and keep it simple. CHALLENGE ACCEPTED: we grow through challenges and stay curious. BULLETPROOF: we’re resilient, ready, and always have a plan.