Security Engineer

Paynetics is a leading fintech company, founder of the Bulgarian Fintech Association. Grounded in payment services, with offices in Bulgaria and the UK, we have built a team of passionate and enthusiastic professionals, on a mission to change the world of payments.
We have launched the first mobile payment app in Bulgaria, the first utilities payment app in the UK, one of the fist automated loyalty solutions in the US and a game changing payment acceptance solution with patent pending.

We are expanding and are looking for an experienced, responsible, and motivated professional for the position Security Engineer. In this role you will support the design, implementation, and maintenance of identity and access controls, endpoint security, and threat detection tools to ensure a secure, resilient infrastructure across hybrid and multi-cloud environments.

What You’ll Be Doing:

• Participate in the design and implement Authentication, Authorization and Accountings (AAA) frameworks using identity protocols (OAuth 2.0, OIDC, SAML), zero trust principles and centralized access governance
• Administer Identity and Access Management platforms with strong focus on SSO, MFA and RBAC/ABAC
• Maintain and enforce the least privileged access controls across hybrid and multi-cloud environments (AWS and Azure)
• Deploy and configure tools (SIEM, EDR/XDR, SOAR) to proactively monitor identity related threats, detect anomalies and support incident response
• Improve security and integrate access policies and workflows into CI/CD pipelines
• Ensure secure onboarding/offboarding process for employees, contractors and third-party integrations.
• Manage endpoint protection using MDM, EDR, and policy enforcement tools across various devices
• Collaborate across teams to implement/improve “Secure by design” principles
• Maintain clear documentation for identity architectures, access controls and incident response runbooks

Our Requirements & Skillset:

• 3+ years of experience in identity security, IAM engineering, or cybersecurity with a focus on access control
• Hands-on experience with IAM tools (Okta, CyberArk and etc.) and protocols, including SAML, OAuth 2.0, OIDC
• Experience with cloud-native IAM and security controls in AWS IAM and Entra ID
• Understanding of modern identity concepts, including Zero Trust and Identity Federation
• Proven ability to respond to security incidents, manage identity-related risks, and enforce compliance across ecosystems

Preferred:

• Certifications: AZ-500, SC-300, AWS Security Specialty, CISSP, or equivalent
• Background in compliance-driven environments, with knowledge of ISO 27001,PCI-DSS, or similar Familiarity with open-source identity tools like Keycloak, FreeIPA, or Authelia is a plus

We offer:

• Exciting job in a premium professional environment
• Highly competitive remuneration
• 25 days annual paid leave + 1 day for your birthday
• Work in a growing team with excellent perspective for professional development
• Additional Health Insurance
• Vouchers
• Company Trainings
• Team buildings and sports activities
• Excellent office location near a metro station