Scopely is looking for a Senior IAM Security Enginee r to join our Information Security team on a remote basis or hybrid basis if located in Barcelona. This role will focus on building, scaling, and securing Scopely’s identity and access management ecosystem across our cloud, SaaS, AI, and remote access environments, with a strong emphasis on Terraform-based IAM automation, access workflow engineering, least-privilege design, identity risk reduction, and AI-assisted operational workflows.

This is a highly technical, hands‑on role for someone who can operate across AWS, GCP, Okta, AWS IAM Identity Center, Zero Trust access models, identity governance workflows, and modern AI-enabled engineering environments, while building scalable identity systems through Infrastructure as Code, workflow orchestration, and automation-first security engineering.

What You Will Do

Build and Evolve Modern IAM Architecture

Design and evolve Scopely’s IAM architecture to support a high-scale, cloud-first environment across AWS, GCP, SaaS applications, AI tooling, and remote access platforms.

Lead initiatives around:

Federated identity architecture using SAML, OIDC, OAuth, and SCIM

Workforce identity and access patterns across internal platforms

Least-privilege role design and access segmentation

RBAC and ABAC models for cloud and SaaS environments

Centralized access models using Okta, AWS IAM Identity Center, Google Cloud IAM, and cloud-native IAM services

Secure cross-account and cross-project access patterns

Service account, workload identity, and non-human identity governance

Zero Trust identity and access control design

Partner with engineering, infrastructure,



and security teams to:

Standardize secure identity and access patterns

Reduce identity sprawl and excessive permissions

Improve access visibility and auditability

Build scalable identity controls for a fast-moving engineering environment

Own Terraform-Based IAM and Access Automation

Own and improve Terraform-based IAM and access automation across Scopely’s cloud and identity environment.

Design, build, and maintain:

Reusable Terraform modules for IAM roles, policies, permission sets, group mappings, and access patterns

Terraform workflows for Okta app assignments, group-based access, and IAM Identity Center automation

Standardized access modules that can be reused safely across teams and environments

Policy-as-code patterns for least privilege and permission boundary enforcement

Terraform-driven onboarding and offboarding flows for identity-related systems

Automation for service account and workload identity provisioning

Access reporting and audit visibility pipelines connected to code-based IAM workflows

Drive improvements in:

Standardization of IAM modules, variables, role definitions, and policy structures

Repeatability and consistency of access changes

Reduction of manual IAM operations





Auditability and change traceability

Safe rollout of identity changes through code review and pull request workflows

Ensure mature Terraform engineering practices around:

State management

Drift detection and remediation

Rollback planning

Blast-radius awareness for IAM changes

Safe promotion of access changes into production

Automate Identity and Access Workflows

Build scalable automation for identity lifecycle management, access requests, entitlement changes, access reviews, and day-to-day IAM operations.

Design and implement:

Provisioning and deprovisioning automation

Access request and approval workflows

Group-based access assignment and role mapping

Okta app integration and assignment automation

IAM Identity Center permission set automation

Self-service identity workflows for internal teams

Identity reporting and access visibility pipelines

Operational tooling that reduces repetitive IAM work

Work with:

Terraform and Infrastructure as Code workflows

Python, Bash, PowerShell, and APIs

CI/CD systems and Git-based change management

Okta Workflows and similar orchestration tooling

ServiceNow, ticketing, and operational workflow integrations

AI tools such as Claude Code, Codex, and similar engineering assistants

MCP-enabled integrations, agentic workflows, and internal automation platforms

Drive improvements in:

Repeatability

Auditability

Operational safetyReduction of manual IAM work

Secure-by-default access onboarding

Strengthen Identity Security and Risk Reduction

Lead initiatives to reduce identity

📌 Senior Security IAM Engineer (Barcelona)
🏢 Scopely
📍 Barcelona