Senior Security IAM Engineer

Role overview

Build and secure identity and access systems across cloud platforms, business applications, and remote work environments. This hands-on senior engineering role focuses on least-privilege access, identity lifecycle workflows, and Terraform-based automation, working closely with security, infrastructure, and engineering teams.

Responsibilities - Design identity architecture for cloud, SaaS, AI tooling, and remote access, including federation, role-based access, and Zero Trust patterns. - Develop reusable Terraform modules and workflows for roles, policies, group mappings, application assignments, and permission sets. - Automate onboarding, offboarding, access requests, approvals, reviews, and workload identity provisioning. - Improve access visibility, auditability, and governance while reducing excessive permissions and manual operations. - Apply safe infrastructure-as-code practices, including state management, drift detection, rollback planning, and controlled production changes. - Partner with technical teams to standardize access patterns and integrate identity workflows with APIs, CI/CD, and operational tools.

Requirements

The source describes a senior, highly technical role but does not provide a specific years-of-experience threshold or a complete qualifications list. It indicates that the work requires practical expertise in identity and access management, Terraform-based automation, cloud environments, and secure access design.

Nice to have

Experience with AWS and GCP identity services, Okta, IAM Identity Center, SAML, OIDC, OAuth, SCIM, Python, Bash, PowerShell, workflow orchestration, and AI-assisted engineering tools is relevant to the systems and workflows described.

Benefits and work setup

Remote work is available, with a hybrid option for candidates located in Barcelona.