Experteer Overview
As a Senior IAM Engineer, you design, build, and operate core identity security capabilities across the enterprise. You will shape IGA architecture, PAM, and secrets management while driving automation and integrations. You partner with Security, IT, and Engineering to deliver secure, scalable identity services. You’ll influence strategy, design, and execution to enable secure access at scale. This role offers impact across governance, security, and automation in a fast-growing platform company.

Compensaciones / Ventajas
• Architect and implement IGA capabilities, including identity lifecycle, access workflows, provisioning/deprovisioning automation, certifications, and role governance
• Maintain ILM framework and controls across the environment
• Develop IAM integrations with HR sources, directories, and SaaS apps using SCIM, SAML/OIDC, APIs, and automation patterns
• Mature PAM controls and operating processes for privileged identities, including time-bound elevation and auditing
• Manage secrets management capabilities for human and non-human identities, including service principals
• Develop automation with scripting and CI/CD-friendly workflows, and infrastructure-as-code patterns (Terraform)
• Create repeatable solutions for access governance,



connector onboarding, reporting, and runbooks
• Respond to IAM operational requests and incidents, improving controls and automation
• Conduct POCs, vendor partnerships, and recommend solutions aligned to security and business needs
• Serve as trusted advisor, translate IAM topics into recommendations, and document standards and procedures
• Mentor peers and influence the team's technical direction

Responsabilidades
• IGA architecture u0026 engineering expertise (identity lifecycle, RBAC/ABAC, attestations, SoD/least privilege)
• PAM concepts and hands-on implementation (JIT/JEA, session controls, auditing)
• Secrets management (vaulting, rotation, access policies, non-human identity security)
• Scripting and development skills (SQL, JavaScript, PowerShell, Python, API integration, Git workflows)
• Experience designing and operating IAM controls in cloud/SaaS environments (Azure, authentication/authorization, identity governance)

Requisitos principales
• comprehensive healthcare coverage
• flexible PTO
• equity RSUs
• annual performance bonus opportunities
• retirement account support
• 14+ weeks of paid parental leave

📌 Sr. Identity and Access Management Engineer (Madrid)
🏢 OneTrust
📍 Madrid