IAM Access Operations

About Sygnum

Sygnum is a global digital asset banking group, founded on Swiss and Singapore heritage. We empower professional and institutional investors, banks, corporates and DLT foundations to invest in digital assets with complete trust. Our team enables this through institutional-grade security, expert personal service and a portfolio of regulated digital asset banking, asset management, tokenisation and B2B services.

In Switzerland, Sygnum holds a banking licence and has CMS and Major Payment Institution Licences in Singapore. The group is also regulated in established global financial hubs including Abu Dhabi and Luxembourg.

We believe that the future has heritage. Our crypto-native team of banking, investment and digital asset technology professionals are building a trusted gateway between the traditional and digital asset economies — Future Finance.

We believe that the future has heritage. Our crypto-native team of banking, investment and digital asset technology professionals are building a trusted gateway between the traditional and digital asset economies that we call Future Finance. To learn more about how Sygnum's mission and values are shaping this digital asset ecosystem, please visit and follow us on LinkedIn and X.

Our Values

A key pillar of our success are the Sygnum values that define and unite us as a team — our SYGN values:

• S – Seek and seize opportunities, and take ownership to deliver results
• Y – Say Yes to integrity and fairness in everything we do
• G – Grow and win together by supporting and challenging one another
• N – Nose for value: focus on what matters to clients, partners and each other

Sygnum is committed to diversity and inclusion. We believe diverse perspectives strengthen our teams, decision-making, and innovation. We embrace equal opportunity throughout hiring, development, and promotion.

About the role

We're seeking an IAM Access Operations & Automation Engineer to modernise and automate identity and access management across our cloud environments. This role focuses on applying Infrastructure-as-Code principles to streamline access provisioning, governance, and lifecycle management while maintaining strong compliance and audit readiness.

You will work hands-on with scripting, automation, and DevOps tooling to improve IAM operational maturity, reduce manual effort, and enforce least-privilege access across human and non-human identities.

Core Responsibilities:

• Design, build, and maintain IAM automation using PowerShell and/or Python, integrating with Microsoft Graph and cloud identity APIs
• Apply Infrastructure as Code (IaC) principles using Terraform to manage identity artefacts such as users, groups, service principals, secrets, access packages, and conditional access policies
• Automate joiner-mover-leaver (JML) lifecycle processes for both workforce and service identities
• Partner with business units and application owners to define access models, entitlements, approval flows, and certifications
• Identify and remediate access risks including orphaned accounts, access drift, over-privileged identities, and unsanctioned privileged access
• Support access reviews, audits, and regulatory requests by providing clear evidence and traceability
• Maintain operational documentation, runbooks, and audit trails to ensure repeatability and resilience
• Work cross-functionally with Security, Platform, and Compliance teams to continuously improve IAM posture

Our ideal candidate

You are an automation-driven IAM engineer who enjoys simplifying complex identity environments through code and governance. You're comfortable operating in regulated environments, understand the importance of auditability, and enjoy working closely with security and engineering teams to deliver practical, scalable access controls.

Essential:

• Strong scripting experience with PowerShell and/or Python, including use of REST APIs (Microsoft Graph preferred)
• Hands-on experience with Infrastructure as Code tools such as Terraform or Bicep
• Experience integrating IAM automation into CI/CD pipelines (GitHub Actions, GitLab, Azure DevOps, or Azure Automation)
• Solid understanding of Microsoft Entra ID or other cloud identity platforms (e.g., Okta, Auth0, AWS IAM)
• Experience working with Azure and/or AWS cloud environments
• Strong written and verbal communication skills in English

Desirable:

• Knowledge of identity protocols including SAML, OAuth2, OpenID Connect, and SCIM
• Understanding of IAM governance concepts: JML, RBAC/ABAC, SoD, access certification
• Familiarity with regulatory frameworks such as FINMA, GDPR, or DORA
• Exposure to access reviews, audit support, and control evidence preparation

Our Offer

Joining Sygnum means being part of a dynamic, global team that is building a trusted gateway between the traditional and digital asset economies. Working at Sygnum, you will experience our fast-paced, exciting work environment that embraces meritocracy and collaboration and open communication. Alongside our ambitious long-term mission, we also come together for reaching important milestones and annual crypto-industry anniversaries like Bitcoin Pizza Day, and regularly celebrate together at themed company events as part of our journey to shape Future Finance.

Sygnum offers a comprehensive package of benefits for all team members. They include:

• Attractive combination of market salaries and entrepreneurial incentive scheme
• Flexible/Work at home policies
• Professional development via Mentoring and Buddy programs
• One-month fully paid sabbatical after five years of continuous employment

If you are passionate about the potential of blockchain to shape Future Finance and your profile is a good fit for this position, please send us your CV today