Experteer Overview In this role you will design and evolve Scopely’s cloud-first IAM architecture to support high-scale environments across AWS, GCP, SaaS, and AI tooling. You will own Terraform-based IAM automation and work across identity platforms to enforce least privilege and zero trust. Collaborating with engineering and security teams, you will drive scalable, secure identity patterns, governance, and AI-assisted operations to reduce risk and improve visibility.

Compensaciones / Ventajas • Design and evolve IAM architecture for high-scale cloud-first environments across AWS, GCP, SaaS, AI tooling, and remote access • Lead federated identity initiatives (SAML, OIDC, OAuth, SCIM) and workforce identity patterns • Develop and maintain reusable Terraform modules for IAM roles, policies, and access patterns; manage Terraform state and drift • Automate onboarding/offboarding, access requests, and group-based access; implement policy-as-code and least-privilege enforcement • Standardize IAM modules, ensure auditability and change traceability; enable safe production deployments • Strengthen Zero Trust and privileged access controls; integrate PAM and adaptive MFA • Improve identity monitoring,



detection, and audit readiness with CIEM, CSPM, and security tooling • Build AI-assisted identity workflows and operational copilots; ensure human-in-the-loop controls

Responsabilidades • 8-12+ years in IAM security engineering, cloud security, or related roles • Strong hands-on experience with AWS IAM, AWS Organizations, IAM Identity Center, SCPs, IAM roles/policies, CloudTrail, GuardDuty, IAM Access Analyzer, SSM • GCP IAM experience including service accounts, workload identity, audit services • Okta administration and workflows; SAML/OIDC/OAuth/SCIM • Terraform-based IAM automation with modular design and state management • Python, Bash, PowerShell, APIs for automation and workflow integration • CI/CD and Git workflows for infrastructure changes • Experience designing and operating IAM for global organizations and complex access needs • Understanding of least privilege engineering, RBAC/ABAC, and identity lifecycle • Familiarity with ZTNA tools like Twingate and remote access designs

Requisitos principales •

📌 Senior Security IAM Engineer (Barcelona)
🏢 Scopely
📍 Barcelona