This position is at Thomson Reuters

The selection process will be entirely managed by Thomson Reuters.

--

Job Description Pagero has recently joined Thomson Reuters. Together, we are building the world’s largest, open business network. With our cloud-based network, customers can reach any business, anywhere in the world – no matter how many borders their operations may cross. We take care of the technical and regulatory requirements across the entire order-to-cash, purchase-to-pay and freight processes, to give customers data accuracy and security, transparency, and real-time visibility. All this through a single connection. We are seeking a highly skilled Identity & Access Management (IAM) Engineer to join our general IAM team as we undertake a complete transformation of our identity landscape — a cornerstone of our enterprise security posture. In this role, you will be responsible for administering secure and scalable Multi-Factor Authentication (MFA), Access Governance, MSFT EntraID, and SSO/Federation solutions. You will drive operational excellence across IAM platforms, with a focus on continuous improvement, automation, and high availability.

Key Responsibilities

In this opportunity as IAM Engineer, you will:

- Administer and implement security across IAM technologies including product MEMORITY, Microsoft Entra, Active Directory, Access Governance, and LDAP directories
- Configure and troubleshoot Single Sign-On (SSO) for enterprise applications using SAML, OAuth, Kerberos, and NTLM
- Implement OpenID Connect (OIDC) and OAuth 2.0 solutions using MEMORITY tools
- Manage and maintain MEMORITY Directory Server,



including cluster management and timely replication of configuration changes across Test and Production environments
- Administer and performance-tune MEMORITY/MSFT EntraID to support high-traffic enterprise workloads
- Deploy and support highly available, scalable MEMORITY infrastructure on AWS and on-premises, enabling SSO and federation for internal access
- Configure MEMORITY Access servers, Gateways, and Agents to protect enterprise resources
- Manage federation services between SiteMinder and MemorityFederate for SAML and WS-FED based application migrations
- Work with multiple Memority Federate adapters including HTML Form, x509, Kerberos, OpenToken, Memority ID, and Composite adapters
- Coordinate with server hosting and MemorityFederate vendor teams to resolve hardware and software issues
- Lead vulnerability mitigation and patch management activities, including version upgrades
- Prepare comprehensive documentation and operational runbooks for the Operations team
- Act as first-level escalation support for IAM operational teams and other IT security functions
- Drive development of automation and integration capabilities within IAM solutions

Required Qualifications

You’re a fit for the role of IAM Engineer if you have the following required qualifications:

- 3+ years of experience designing, develop Memority,



and implementing IAM security technologies including MEMORITY, Entra, Active Directory, Access Governance, and LDAP
- Strong hands-on experience with SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), Kerberos, NTLM, LDAP, and RADIUS
- Proven experience integrating, develop Memority, and automating MFA and authentication protocols
- Deep understanding of Identity domains: Authentication, Authorization, Access Management, and Attestation
- Experience with Memority Federate including adapter configuration, Service Provider/Identity Provider connections, metadata management, and SSL certificate handling
- Hands-on experience with Memority Access integration with Memority Federate to protect applications using Memority Access Tokens
- Demonstrated experience with API security concepts, including integration with Open AM, SiteMinder, OAuth 2.0, JWT tokens, and certificate-based authentication
- Familiarity with cloud platforms (AWS preferred) and an understanding of dynamic computing's impact on Identity
- Proven ability to deliver Proof of Concepts (POCs) for identity and API security integrations

Preferred Qualifications

- Strong problem-solving and troubleshooting skills in complex, large-scale enterprise environments
- Experience designing and engineering identity solutions in a large global enterprise

#LI-EH2

What’s in it For You?

- Hybrid Work Model: We’ve adopted a flexible hybrid working environment (2-3 days a week in the office depending on the role) for our office-based roles while delivering a seamless experience that is digitally and physically connected.

📌 IAM Engineer (Madrid)
🏢 Thomson Reuters
📍 Madrid