Scopely is looking for a Senior IAM Security Enginee"r to join our Information Security team on a remote basis in Spain. This role will focus on building, scaling, and securing Scopely’s identity and access management ecosystem across our cloud, SaaS, AI, and remote access environments, with a strong emphasis on Terraform-based IAM automation, access workflow engineering, least-privilege design, identity risk reduction, and AI-assisted operational workflows. This is a highly technical, hands‑on role for someone who can operate across AWS, GCP, Okta, AWS IAM Identity Center, Zero Trust access models, identity governance workflows, and modern AI-enabled engineering environments, while building scalable identity systems through Infrastructure as Code, workflow orchestration, and automation‑first security engineering. What You Will Do Build and Evolve Modern IAM Architecture Design and evolve Scopely’s IAM architecture to support a high-scale, cloud-first environment across AWS, GCP, SaaS applications, AI tooling, and remote access platforms. Lead initiatives around: Federated identity architecture using SAML, OIDC, OAuth, and SCIMWorkforce identity and access patterns across internal platformsLeast-privilege role design and access segmentationRBAC and ABAC models for cloud and SaaS environmentsCentralized access models using Okta, AWS IAM Identity Center, Google Cloud IAM, and cloud-native IAM servicesSecure cross-account and cross-project access patternsService account, workload identity, and non-human identity governanceZero Trust identity and access control design Partner with engineering, infrastructure, and security teams to:



Standardize secure identity and access patternsReduce identity sprawl and excessive permissionsImprove access visibility and auditabilityBuild scalable identity controls for a fast-moving engineering environment Own Terraform-Based IAM and Access Automation Own and improve Terraform-based IAM and access automation across Scopely’s cloud and identity environment. Design, build, and maintain: Reusable Terraform modules for IAM roles, policies, permission sets, group mappings, and access patternsTerraform workflows for Okta app assignments, group-based access, and IAM Identity Center automationStandardized access modules that can be reused safely across teams and environmentsPolicy-as-code patterns for least privilege and permission boundary enforcementTerraform-driven onboarding and offboarding flows for identity-related systemsAutomation for service account and workload identity provisioningAccess reporting and audit visibility pipelines connected to code-based IAM workflows Drive improvements in: Standardization of IAM modules, variables, role definitions, and policy structuresRepeatability and consistency of access changesReduction of manual IAM operationsAuditability and change traceabilitySafe rollout of identity changes through code review and pull request workflows Ensure mature Terraform engineering practices around: State managementDrift detection and remediationRollback planningBlast-radius awareness for IAM changesSafe promotion of access changes into production Automate Identity and Access Workflows Build scalable automation for identity lifecycle management, access requests,



entitlement changes, access reviews, and day-to-day IAM operations. Design and implement: Provisioning and deprovisioning automationAccess request and approval workflowsGroup-based access assignment and role mappingOkta app integration and assignment automationIAM Identity Center permission set automationSelf-service identity workflows for internal teamsIdentity reporting and access visibility pipelinesOperational tooling that reduces repetitive IAM work Work with: Terraform and Infrastructure as Code workflowsPython, Bash, PowerShell, and APIsCI/CD systems and Git-based change managementOkta Workflows and similar orchestration toolingServiceNow, ticketing, and operational workflow integrationsAI tools such as Claude Code, Codex, and similar engineering assistantsMCP-enabled integrations, agentic workflows, and internal automation platforms Drive improvements in: RepeatabilityAuditabilityOperational safetyReduction of manual IAM workSecure-by-default access onboarding Strengthen Identity Security and Risk Reduction Lead initiatives to reduce identity-related risk across human and non-human identities. Design and implement controls for: Excessive permissions and privilege escalation reductionService account and workload identity hardeningLong-lived credential reductionCross-account trust policy review and hardeningPermission boundary enforcementRole lifecycle managementJust-in-time and time-bound privileged accessBreak‑glass access workflowsIdentity anomaly detection and misuse investigation Use native and third‑party tooling to identify and remediate risk, including: AWS IAM Access AnalyzerCloudTrailGuardDutyGCP‑native IAM and audit servicesOkta System Log and access reportingCIEM, CSPM, and related cl

📌 Senior Security IAM Engineer (España)
🏢 Scopely
📍 España