Building the Future of Open FinancePayward - the parent company behind Kraken, Ninja Trader, Breakout, x Stocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system.Before you apply, we encourage you to explore our culture page to understand what drives us and how we work.The teamPayward, the parent company behind Kraken, Ninja Trader, x Stocks, Breakout, and a growing portfolio of businesses, is scaling fast through active M&A.; Every acquisition brings its own collaboration stack, its own Google Workspace tenant or Slack instance, its own domains, its own archiving obligations. Someone has to bring all of that into one secure, compliant, well‑run environment. That someone is you.This role owns the productivity and collaboration platforms, Google Workspace, Slack, and Zoom, across the Payward family of brands, with a focus on M&A; integration. When we buy a company, you're the person who scopes the migration, moves the users, channels, files, and configurations, untangles the acquired environment, and lands it cleanly inside Payward's security and identity stack.You'll work across Legal, Compliance, IT, Security, Corporate Development, and the acquired companies themselves, often as the most knowledgeable person in the room on how these platforms actually connect. This is a build‑and‑own role, not a keep‑the‑lights‑on role.M&A; Integration (Core Focus)Drive collaboration‑platform integration end‑to‑end for each acquisition, scoping, planning, executing, and closing out migrations of users, Slack channels, Google Workspace Drive, mailboxes, and configurations from acquired companies into the Payward environmentAssess acquired‑company collaboration stacks during and after diligence: what they run, how it’s configured, what the security and compliance gaps are, and what it takes to consolidateRationalize overlapping tools across brands, decide what migrates, what sunsets, and what stays, and see those calls throughBuild repeatable playbooks, tooling, and automation so each successive integration is faster and cleaner than the lastCoordinate cutover timelines and TSA‑driven dependencies with Corporate Development, Legal, and the acquired teamsCollaboration PlatformsOwn Google Workspace, Slack, and Zoom at multi‑entity enterprise scale, architecture, governance, licensing, configuration, and day‑to‑day operations across the brand portfolioBuild and maintain integrations between collaboration tools and the broader identity and security stack (Okta, Global Relay, e Discovery tooling, archiving platforms)Define and enforce cross‑brand platform governance standards;
build automation that makes the secure path the easy pathCollaborate with HRIS and IAM teams to manage clean onboarding and offboarding across platforms and entitiesEmail & Domain SecurityOwn email security infrastructure across brands, filtering, quarantine, impersonation defenses, and DMARC/SPF/DKIM hygiene, and raise the bar as new entities and threats arriveManage a large, multi‑registrar, multi‑brand domain portfolio (Cloudflare, Mark Monitor, and others);
lead DNS migrations, audits, and consolidation as brands come inRespond to phishing campaigns, insider threat signals, and anomalous domain activity with speed and precisionCompliance & Legal SupportLead legal hold management, e Discovery queries, and data productions across email, Slack, and Google Drive, across multiple entitiesArchitect and maintain compliant archiving infrastructure (General Relay, Smarsh, Virtru) as new businesses are onboarded and legacy ones sunsetProduce and defend evidence for regulatory and audit obligations (17a‑4, ISO, external auditors), working directly with Legal and ComplianceSecurity & Access ControlDesign and maintain DLP rules, group access controls, and data access policies across collaboration platforms and entitiesLead insider threat reduction initiatives, access revocation, high‑risk extension management, public channel governance, during and after integrations, when risk is highestOwn platform‑level incident response: investigation, containment, and post‑incident improvementTooling & Vendor ManagementEvaluate, onboard, consolidate, and sunset Saa S tools across the collaboration and security stack as the portfolio growsLead vendor relationships, procurement, and renewals;
make build‑vs‑buy‑vs‑sunset calls and see them throughBuild automation that reduces manual toil and improves governance at scaleExperience4–6 years of hands‑on experience administering Google Workspace and Slack at companies with 1,000+ users, including complex migrations and governance workDemonstrated experience owning or leading a technology migration in an M&A; or systems‑consolidation context, ideally more than one. This is the heart of the roleSolid email security experience: filtering, quarantine, DMARC/SPF/DKIM, impersonation defense, threat responseDNS administration and domain portfolio management at meaningful scaleDirect experience with compliance and legal workflows, legal holds, e Discovery, regulatory data productions, and compliant archiving platformsWhat you bringYou operate end‑to‑end: scope the problem, design the solution, execute it, and close it out cleanly,
especially under the time pressure of a dealYou're comfortable making decisions under ambiguity, acquired environments are always messy, and defending them with clear reasoningYou understand that clean infrastructure is a security control, not an operational nicetyYou work well across functions: Legal, Compliance, IT, Security, Corporate Development, and the acquired teams you're integratingYou communicate proactively, no backchannels, no surprises;
stakeholders know wherethings standYou manage multiple concurrent integrations without losing threadsYou automate and systematize recurring work;
you build things that outlast you, documentation, tooling, governance frameworks others can operateYou take ownership: if something's broken, you fix itNice to havesExperience integrating multiple acquired companies' collaboration stacks into a single parent environmentExperience with Global Relay, Smarsh, Virtru, or comparable archiving platforms, including onboarding and architecture decisionsFamiliarity with Okta and its integration patterns with Google Workspace and SlackExperience managing a large domain portfolio across multiple registrars and DNS providersExposure to e Discovery and legal hold toolingComfort in a regulated industry, financial services, crypto, fintech, where compliance isn't optionalOur commitmentPayward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto.We may ask candidates to complete job‑related skills or work‑style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision.As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws.Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis.Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution.We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance.Candidate Privacy Notice
📌 M&A Collaboration & Security Platforms Engineer (Madrid)
🏢 Kraken
📍 Madrid