Linux Systems Engineer – Identity, PKI & Security (IDM)

Role overview Own the Linux identity and access foundations used across cloud infrastructure, including how users, credentials, certificates, and secrets are provisioned and managed. You will build automated, security-focused systems and work closely with security colleagues to turn threat models and compliance requirements into reliable infrastructure.

Responsibilities - Operate the central identity service and integrate Linux hosts with SSSD, PAM, and NSS for user lifecycle and access management. - Design automated short-lived SSH certificate workflows and support internal PKI and secrets management. - Use SaltStack and Ansible to manage identity services, SSH configuration, and access policies declaratively. - Partner with security teams to translate threat models and compliance rules into production configurations and code. - Help replace legacy directory approaches with Linux-native, automated identity systems.

Requirements - Linux systems engineering experience spanning identity, authentication, credentials, or access control. - Knowledge of identity protocols and standards, including OIDC, OAuth2, WebAuthn/FIDO2, and POSIX identity mapping. - Experience building or migrating identity sources of truth. - Ability to convert security requirements into precise system configuration, automation, and infrastructure code.

Nice to have - Production experience with Kanidm, OpenBao, or step-ca. - Experience moving from Active Directory or Windows domains to Linux-native identity systems. - Development experience with SSSD plugins, PAM modules, or Python/Rust tools for system administration.

Benefits and work setup - Remote role within the EU; full-time and permanent. - Compensation includes cash and equity, with additional benefits.