Scopely is looking for a Senior IAM Security Enginee"r to join our Information Security team on a remote basis in Spain. This role will focus on building, scaling, and securing Scopely’s identity and access management ecosystem across our cloud, SaaS, AI, and remote access environments, with a strong emphasis on Terraform-based IAM automation, access workflow engineering, least-privilege design, identity risk reduction, and AI-assisted operational workflows.

This is a highly technical, hands‑on role for someone who can operate across AWS, GCP, Okta, AWS IAM Identity Center, Zero Trust access models, identity governance workflows, and modern AI-enabled engineering environments, while building scalable identity systems through Infrastructure as Code, workflow orchestration, and automation‑first security engineering.

What You Will Do

Build and Evolve Modern IAM Architecture

- Design and evolve Scopely’s IAM architecture to support a high-scale, cloud-first environment across AWS, GCP, SaaS applications, AI tooling, and remote access platforms.

Lead initiatives around:

- Federated identity architecture using SAML, OIDC, OAuth, and SCIM
- Workforce identity and access patterns across internal platforms
- Least-privilege role design and access segmentation
- RBAC and ABAC models for cloud and SaaS environments
- Centralized access models using Okta, AWS IAM Identity Center, Google Cloud IAM, and cloud-native IAM services
- Secure cross-account and cross-project access patterns
- Service account, workload identity, and non-human identity governance
- Zero Trust identity and access control design

Partner with engineering, infrastructure,



and security teams to:

- Standardize secure identity and access patterns
- Reduce identity sprawl and excessive permissions
- Improve access visibility and auditability
- Build scalable identity controls for a fast-moving engineering environment

Own Terraform-Based IAM and Access Automation

- Own and improve Terraform-based IAM and access automation across Scopely’s cloud and identity environment.

Design, build, and maintain:

- Reusable Terraform modules for IAM roles, policies, permission sets, group mappings, and access patterns
- Terraform workflows for Okta app assignments, group-based access, and IAM Identity Center automation
- Standardized access modules that can be reused safely across teams and environments
- Policy-as-code patterns for least privilege and permission boundary enforcement
- Terraform-driven onboarding and offboarding flows for identity-related systems
- Automation for service account and workload identity provisioning
- Access reporting and audit visibility pipelines connected to code-based IAM workflows

Drive improvements in:

- Standardization of IAM modules, variables, role definitions, and policy structures
- Repeatability and consistency of access changes
- Reduction of manual IAM operations




- Auditability and change traceability
- Safe rollout of identity changes through code review and pull request workflows

Ensure mature Terraform engineering practices around:

- State management
- Drift detection and remediation
- Rollback planning
- Blast-radius awareness for IAM changes
- Safe promotion of access changes into production

Automate Identity and Access Workflows

- Build scalable automation for identity lifecycle management, access requests, entitlement changes, access reviews, and day-to-day IAM operations.

Design and implement:

- Provisioning and deprovisioning automation
- Access request and approval workflows
- Group-based access assignment and role mapping
- Okta app integration and assignment automation
- IAM Identity Center permission set automation
- Self-service identity workflows for internal teams
- Identity reporting and access visibility pipelines
- Operational tooling that reduces repetitive IAM work

Work with:

- Terraform and Infrastructure as Code workflows
- Python, Bash, PowerShell, and APIs
- CI/CD systems and Git-based change management
- Okta Workflows and similar orchestration tooling
- ServiceNow, ticketing, and operational workflow integrations
- AI tools such as Claude Code, Codex, and similar engineering assistants
- MCP-enabled integrations, agentic workflows, and internal automation platforms

Drive improvements in:

- Repeatability
- Auditability
- Operational safety
- Reduction of manual IAM work
- Secure-by-default access onboarding

Strengthen Identity Security and Risk Reduc

📌 Senior Security IAM Engineer (España)
🏢 Scopely
📍 España