Position: IAM Architect/Engineer

Location: Remote Spain

Join us on a journey of endless possibilities

At Strada, possibility isn't just a promise – it's the foundation of everything we do. We believe in unlocking potential for every colleague, creating a journey of growth, discovery, and impact.

With the support, resources, and opportunities we provide, you’ll build a fulfilling future - working on meaningful projects that span industries and regions, contributing to outcomes that matter.

Strada is a people, payroll, and technology leader simplifying international workforce management. Operating in 180+ countries, we design and deliver people-first solutions powered by cloud-based technology - helping organizations grow and enabling workforces to perform at their best.

Learn more at www.stradaglobal.com

Role

IAM Strada General is a leading provider of HR and payroll services, delivering secure and innovative workforce solutions worldwide. As we continue to scale, Identity & Access Management (IAM) is at the heart of our cybersecurity and business enablement strategy, ensuring seamless and secure access for employees, customers, and partners.

Role Overview

- The IAM Architect will lead the design, implementation, and optimization of enterprise identity and access solutions, ensuring seamless integration across cloud, SaaS, and on-prem systems.
- This role will focus on Entra ID (Azure AD), Entra B2C, SAP, and Workday integrations, balancing security, user experience, and operational efficiency.
- This is a hands-on technical leadership role, working closely with security engineers, infrastructure teams, and business application owners to drive a modern IAM strategy at Strada.





Key Responsibilities

- Identity & Access Architecture Design and implement a scalable IAM architecture utilizing Microsoft Entra ID, Entra B2C, and other identity platforms.
- Lead integration efforts across SAP, Workday, SaaS applications, and custom-built platforms.
- Define IAM governance models, including role-based access control (RBAC), attribute-based access control (ABAC), and just-in-time (JIT) access.
- Support the adoption of zero-trust identity principles, including MFA, conditional access, and passwordless authentication.
- Identity Lifecycle & Automation
- Architect identity lifecycle management solutions, automating provisioning/deprovisioning across HR, IT, and security systems.
- Implement Identity Governance & Administration (IGA) best practices, ensuring least privilege access and role alignment.
- Develop custom integrations and automation scripts (PowerShell, Python, API-based solutions) to enhance IAM workflows.
- Collaborate with HR (Workday) and ERP (SAP) teams to synchronize identity management with workforce operations.
- Security & Compliance Ensure regulatory compliance (GDPR, SOC 2, ISO 27001) by aligning IAM controls with security frameworks.
- Design and enforce privileged access management (PAM) solutions, securing admin accounts and critical systems.




- Support security audits and identity risk assessments, addressing access anomalies and reducing attack surfaces.
- Enhance identity threat detection and response capabilities in collaboration with SOC and SIEM teams.

Required Qualifications

- Experience 6+ years of hands-on IAM experience, with at least 2 years in an architect or senior engineering role.
- Expertise in Entra ID (Azure AD), Entra B2C, and IAM-related Microsoft security tools.
- Experience integrating IAM with SAP, Workday, and other enterprise applications.
- Deep knowledge of SAML, OAuth, OpenID Connect, SCIM, and federation protocols.
- Hands-on experience with identity automation, PowerShell scripting, and API-based integrations.
- Strong understanding of zero-trust architecture, privileged access management (PAM), and adaptive authentication.
- Ability to collaborate with IT, HR, DevOps, and security teams to align identity solutions with business needs.

Preferred Qualifications

- Certifications such as Microsoft Certified: Identity and Access Administrator, CISSP, GIAC-GIAM, or Okta Certified Architect.
- Experience with Azure AD Conditional Access, Defender for Identity, and Entra Permissions Management.
- Knowledge of Identity Governance and Administration (IGA) platforms like SailPoint or Saviynt.
- Familiarity with DevOps and cloud security best practices in AWS/Azure environments.

What We Offer

- Opportunity to shape the architecture of mission-critical cloud applications.
- Collaborative and innovative work environment.

At Strada, Our Values Guide Everything We Do

- Anticipate Customer Ne

📌 IAM Architect/Engineer (Madrid)
🏢 Strada
📍 Madrid