Job Description

Pagero has recently joined Thomson Reuters. Together, we are building the world’s largest, open business network. With our cloud-based network, customers can reach any business, anywhere in the world – no matter how many borders their operations may cross. We take care of the technical and regulatory requirements across the entire order-to-cash, purchase-to-pay and freight processes, to give customers data accuracy and security, transparency, and real-time visibility. All this through a single connection.

We are seeking a highly skilledIdentity & Access Management (IAM)Engineer to join our global IAM team as we undertake a complete transformation of our identity landscape — a cornerstone of our enterprise security posture.

In this role, you will be responsible for administering secure and scalable Multi-Factor Authentication (MFA), Access Governance, MSFT EntraID, and SSO/Federation solutions. You will drive operational excellence across IAM platforms, with a focus on continuous improvement, automation, and high availability.

Key Responsibilities

In this opportunity as IAM Engineer, you will:

- Administer and implement security across IAM technologies includingproduct MEMORITY, Microsoft Entra, Active Directory, Access Governance, andLDAP directories
- Configure and troubleshootSingle Sign-On (SSO)for enterprise applications using SAML, OAuth, Kerberos, and NTLM
- ImplementOpenID Connect (OIDC)andOAuth 2.0solutions using MEMORITY tools
- Manage and maintainMEMORITY Directory Server, including cluster management and timely replication of configuration changes across Test and Production environments




- Administer and performance-tuneMEMORITY/MSFT EntraIDto support high-traffic enterprise workloads
- Deploy and support highly available, scalable MEMORITY infrastructure onAWS and on-premises, enabling SSO and federation for internal access
- ConfigureMEMORITY Accessservers, Gateways, and Agents to protect enterprise resources
- Manage federation services between SiteMinder and MemorityFederate for SAML and WS-FED based application migrations
- Work with multiple Memority Federate adapters including HTML Form, x509, Kerberos, OpenToken, Memority ID, and Composite adapters
- Coordinate with server hosting and MemorityFederate vendor teams to resolve hardware and software issues
- Leadvulnerability mitigation and patch managementactivities, including version upgrades
- Prepare comprehensive documentation and operational runbooks for the Operations team
- Act asfirst-level escalation supportfor IAM operational teams and other IT security functions
- Drive development of automation and integration capabilities within IAM solutions

Required Qualifications

You’re a fit for the role of IAM Engineer if you have the following required qualifications:

- 3+ yearsof experience designing, develop Memority, and implementing IAM security technologies including MEMORITY, Entra, Active Directory, Access Governance, and LDAP
- Strong hands-on experience withSAML 2.0, OAuth 2.0, OpenID Connect (OIDC), Kerberos,



NTLM, LDAP,andRADIUS
- Proven experience integrating, develop Memority, and automatingMFA and authentication protocols
- Deep understanding of Identity domains: Authentication, Authorization, Access Management, and Attestation
- Experience withMemority Federateincluding adapter configuration, Service Provider/Identity Provider connections, metadata management, and SSL certificate handling
- Hands-on experience withMemority Accessintegration with Memority Federate to protect applications using Memority Access Tokens
- Demonstrated experience withAPI securityconcepts, including integration with Open AM, SiteMinder, OAuth 2.0, JWT tokens, and certificate-based authentication
- Familiarity withcloud platforms(AWS preferred) and an understanding of dynamic computing's impact on Identity
- Proven ability to deliverProof of Concepts (POCs)for identity and API security integrations

Preferred Qualifications

- Strongproblem-solving and troubleshootingskills in complex, large-scale enterprise environments
- Experience designing and engineering identity solutions in alarge general enterprise

What’s in it For You?

- Hybrid Work Model: We’ve adopted a flexible hybrid working environment (2-3 days a week in the office depending on the role) for our office-based roles while delivering a seamless experience that is digitally and physically connected.

- Flexibility & Work-Life Balance: Flex My Way is a set of supportive workplace policies designed to help manage personal and professional responsibilities, whether caring for family, giving back to the community, or finding time to refresh and reset.

📌 IAM Engineer (Madrid)
🏢 Thomson Reuters
📍 Madrid