Select how often (in days) to receive an alert:

IAM Authorization Specialist

Location: Sant Just Desvern, B, ES, 08960

City : Sant Just Desvern State : Barcelona (ES-B) Country : Spain (ES) Requisition Number : 49176

Bunge has an exciting opportunity available for an IAM Authorization Specialist. In this role, you will be part of a global team working on challenging, meaningful projects impacting core business activities. Since 1818, Bunge has been connecting farmers to consumers to deliver essential food, feed, and fuel to the world. Looking to the future, our ambition is to continuously reinvent ourselves, leveraging data to be at the forefront of analytics, technology and talent to accomplish our purpose in a better, faster and simpler way. Bunge is committed to operating and thriving in the digital world – creating world class agile teams where teammates are empowered and encouraged to collaborate and test and learn to succeed.

At Bunge, people don’t just come here to work, they come here to grow – solving challenges that directly impact the world with a diverse team of thinkers and doers. Bunge offers a strong compensation and benefits package, generous paid time off program, flexible work arrangements, and opportunity to progress. Our hybrid work environment provides a balance of in-office and remote work.

Most importantly, in all we do we live our values

- Act as One Team by fostering inclusion, collaboration, and respect
- Drive for Excellence by being agile, innovative and efficient
- Do What's Right by acting safely, ethically, and sustainably

Overview

Join our Identity & Access Management team as an IAM Authorization Specialist and help shape the security and resilience of our integral identity infrastructure.



In this role, you’ll work with technologies including Active Directory, Entra ID, PKI, and certificate services, taking ownership of critical services, solving complex technical challenges, and driving improvements in security, automation, and reliability. You’ll have the opportunity to work independently, influence technical decisions, and collaborate with teams across Cybersecurity and IT.

Main Accountabilities

- Manage projects and processes related to Active Directory, EntraID, and Public Key Infrastructure (PKI), following specific functional policy and broad procedures to achieve established goals.
- Responsible for the execution and ongoing support of key identity infrastructure and cryptographic security services, including on-premises Active Directory, enterprise PKI, certificate services
- Participate in small to medium-sized projects of moderate complexity, actively contributing to process improvements within the directory and domain services environment.
- Apply in-depth knowledge of Directory & Domain Services and basic knowledge of related disciplines to adapt departmental plans and recommend solutions and best practices.
- Analyze and resolve complex identity infrastructure issues involving Active Directory authentication, domain and forest services, certificate issuance and validation,



certificate trust, and private key protection, including situations where established solutions or precedents may not exist.
- Contribute to the design, implementation, and maintenance of secure and efficient directory and domain services solutions.
- Provide leadership and technical guidance to other professionals and/or support staff on matters pertaining to Directory & Domain Services.
- Drive continuous improvement by identifying opportunities to automate administrative processes, strengthen security controls, improve monitoring, reduce manual certificate and key management activities, and increase service resiliency.

Knowledge and Technical Competencies

- Bachelor's degree (Master's may be required at higher levels) with between 11 - 14 years of position-related functional experience, or an equivalent combination of education and experience
- In-depth knowledge of Directory Services (e.g., Active Directory, LDAP, Azure AD) and Domain Management.
- Strong understanding of enterprise PKI concepts and Microsoft Active Directory Certificate Services (AD CS), including certificate authorities, registration authorities, certificate templates, certificate issuance, renewal, revocation, trust chains, CRLs, and OCSP.
- Understanding of certificate-based authentication and how certificates and PKI integrate with Active Directory, applications, infrastructure platforms, and modern identity environments.
- Knowledge of security principles applicable to identity infrastructure, including least privilege, separation of duties, privileged access management, tiered administration, auditing, and protection of highly privileged inf

📌 IAM Authorization Specialist (Sant Just Desvern)
🏢 Bunge
📍 Sant Just Desvern