Experteer Overview
In this role you will design and govern enterprise IAM architectures to secure identities and access across multi‑geography environments. You will lead the evolution of the IAM program within a security‑minded, cross‑functional team aligned with Zero Trust principles. You will shape policy, governance, and KPI tracking to drive compliant, risk‑aware identity controls. This role offers impact at scale, shaping security posture and enabling trusted digital experiences within Allianz Group.

Compensaciones / Incentivos
• Design and maintain enterprise IAM architectures (identity lifecycle, access governance, authentication/authorization, directory services, PAM) aligned with Zero Trust principles
• Provide architectural guidance on IAM platforms (Microsoft Entra ID, SailPoint, CyberArk, Okta, Ping Identity, ForgeRock) and modern authentication protocols (SAML, OAuth 2.0, OpenID Connect, FIDO2)
• Draft and maintain identity security policies, access governance standards, and technical baselines; support governance processes for architecture decisions, privilege escalation sign‑offs, and time‑bound access derogations
• Define and track KPIs/KRIs for IAM posture (privileged accounts, MFA adoption, orphaned accounts, access certification) and present governance reporting to security committees
• Contribute to or lead IAM design authority and architecture review board (ARB)



processes; act as identity security advisor to IT and business teams

Responsabilidades
• Higher education degree in Information Security, Computer Science, Engineering, or related technical field
• 5+ years of experience in Identity u0026 Access Management Architecture or IAM Engineering in enterprise environments
• Hands‑on experience designing and implementing enterprise IAM architectures
• Strong understanding of Zero Trust Identity principles (least privilege, continuous verification, conditional access, adaptive authentication)
• Experience with enterprise IAM platforms (Microsoft Entra ID, SailPoint, CyberArk, Okta, Ping Identity, ForgeRock, One Identity) and PAM strategy, implementation, governance
• Knowledge of identity federation, SSO, and modern authentication protocols (SAML, OAuth 2.0, OpenID Connect, FIDO2/passkeys) and certificate‑based authentication
• Experience with access governance: RBAC, ABAC, access reviews, SoD
• Familiarity with DORA, NIS2, ISO 27001, NIST CSF, and GDPR (data access controls)
• Excellent English skills (written and spoken)
• Interest in IT and Generative AI as valuable assets

Requisitos principales
• hybrid work model
• bonus scheme
• pension
• employee shares program
• employee discounts
• lifelong learning and career mobility

📌 Information Security Solution Architect - Identity & Access Management (m/f/d) (Barcelona)
🏢 Allianz
📍 Barcelona