Senior Enterprise Identity & Access Management Engineer

Careem is a prominent technology platform dedicated to building the Everything App for the greater Middle East, simplifying how people move, order food and groceries, manage payments, and more. Since its inception in 2012, Careem has empowered over 2.5 million Captains and served more than 70 million customers across 70 cities in 10 countries, spanning from Morocco to Pakistan. The company embraces a dynamic, remote-first work culture that prioritizes innovation and employee experience. Careem is currently looking for a Senior Enterprise Identity & Access Management (IAM) Engineer to join an agile team responsible for designing, implementing, and maintaining enterprise IAM services such as Okta, SailPoint, Thycotic, and CyberArk. This role involves onboarding applications, driving technical decisions, and collaborating closely with Infrastructure, IT, Compliance, and Legal teams to build secure, scalable IAM systems that meet stringent security standards.

Key Responsibilities
- Support and maintain a world-class enterprise IAM infrastructure aligned with business objectives to facilitate ongoing growth.
- Implement, maintain, and modernize Careem’s Identity and Access Management systems, ensuring broad adoption, security, compliance, and an excellent user experience.
- Address business and colleague experience challenges by leveraging effective technology solutions.
- Contribute to shaping the identity architecture and strategic direction as the company evolves.
- Communicate and collaborate effectively with stakeholders across multiple departments.
- Mentor junior team members to support their technical development and knowledge growth.
- Drive innovation and promote best practices in IAM within a fast-paced, hyper-growth environment.

Required Qualifications
- Bachelor’s degree in Computer Science, Management Information Systems, Information Systems, or a related discipline.
- At least 6 years of hands-on experience with enterprise or corporate Identity and Access Management systems.
- Strong understanding of authentication protocols and implementation details, including SSO, OAuth2, SAML, and OpenID Connect.
- Extensive experience designing and implementing IAM solutions using vendor products such as Okta and SailPoint.
- Practical experience with cloud IAM systems, including AWS Directory Services and associated identity and access management tools.
- Proven ability to define and execute the future vision and roadmap for Identity, Authentication, and Authorization.
- Expertise in designing secure, seamless access systems that support internal users while maintaining system stability.
- Proficiency in automation and scripting using tools like Python, Git, and CI/CD pipelines to minimize manual efforts.
- Experience managing Privileged Access Management (PAM) systems.
- Familiarity with regulatory IAM controls, including SOx and GDPR compliance.
- Excellent communication skills coupled with a proactive, can-do attitude.

Preferred Qualifications and Benefits
- Experience working in a hyper-growth e-commerce or technology environment.
- Passion for mentoring and developing junior team members.
- Flexible work schedule with four days in the office and one day remote, plus the option to work remotely from any country for 30 days annually.
- Unlimited vacation days and access to healthcare benefits, including fitness reimbursements for gym memberships and training classes.
- Opportunity to collaborate with inspiring colleagues in a purpose-driven organization committed to making a meaningful impact across the Middle East.
- Continuous learning and growth opportunities within a community of talented professionals.

This position is based in Karachi, Pakistan, and is ideal for candidates eager to contribute to a rapidly evolving IAM landscape within a leading regional technology company. Careem is dedicated to equal employment opportunity and diversity initiatives, fostering an inclusive workplace for all employees.