ИспанияSenior Security IAM Engineer
1 нед. назад
ИспанияSeniorRemote
terraformawsgcpoktasamloidcoauthscim
Senior Security IAM Engineer focused on building and securing identity and access management systems across cloud, SaaS, and AI environments with automation and infrastructure as code.
О компании
- is a leading video game and global interactive entertainment company, home to many of the world’s most beloved and enduring experiences, including two of the most successful mobile games of all-time “MONOPOLY GO!” and “Pokémon GO,” along with “Stumble Guys,” “Star Trek™ Fleet Command,” “MARVEL Strike Force,” “WWE Champions,” the Scrabble® franchise, “Yahtzee® With Buddies,” and many others. Across mobile, web, PC, and console, creates, develops, publishes, and live-operates one of the most diversified and award-winning portfolios in the games industry — bringing hundreds of millions of players together through a shared love of play.
- Founded in 2011, is powered by its exceptional team — including thousands of world-class gamemakers around the globe, a distinctive tenet-driven culture, and its proprietary technology platform, Playgami. Together, these strengths have fueled ’s position as the #1 mobile games company in the U.S. and #2 globally, generating more than $10 billion in lifetime revenue. Whether building global sensations like “MONOPOLY GO!” from the ground up, or expanding through strategic acquisitions, including the FoxNext, GSN, and Explore games businesses — consistently delivers experiences players love today and return to for years to come.
- Recognized multiple times as one of the "100 Most Influential Companies in the World" by TIME magazine and one of Fast Company's "World's Most Innovative Companies" and “Best Workplaces for Innovators,” believes that video games can be a force for good — creating meaningful connections, vibrant communities, and making life better through play.
- has global operations and partners across four continents in more than a dozen countries worldwide. For more information, visit:.
- Notice to Candidates: will never request payment or financial information during the application or hiring process. Please apply only through our official website and verify that all Talent Partner communications come from an email address ending in @ .com .
- Should you have any questions or encounter any fraudulent requests/emails/websites, please immediately contact recruiting@.com. Our job applicant privacy policies are available here: California Privacy Notice and EEA/UK Privacy Notice .
Будет плюсом
- Experience with Britive, CyberArk, SailPoint, or similar PAM/PIM platforms
- Experience with Okta Workflows, CIEM platforms, or identity governance tooling
- Experience with Wiz, GuardDuty, Astrix, or similar tools for identity-related investigations
- Experience in gaming, SaaS, or multi-studio environments
- Experience with passwordless authentication, WebAuthn, or FIDO2
- Experience building AI-assisted workflows for IAM operations, documentation, access reviews, or investigations
- Familiarity with AI security frameworks, governance, and safe agentic automation patterns
- Security certifications such as CISSP, AWS Security Specialty, or relevant IAM/cloud certifications
- This role is ideal for someone who is excited about building modern identity security beyond traditional approaches and wants to help scale secure access across cloud, SaaS, AI, and engineering environments. If you enjoy solving IAM challenges with Terraform, automation, reusable engineering patterns, and well-designed identity systems, we’d love to hear from you.
- Please ensure that the résumé/CV you attach is written in English.
Другое
- is looking for a Senior IAM Security Enginee r to join our Information Security team on a remote basis in Spain. This role will focus on building, scaling, and securing ’s identity and access management ecosystem across our cloud, SaaS, AI, and remote access environments, with a strong emphasis on Terraform-based IAM automation, access workflow engineering, least-privilege design, identity risk reduction, and AI-assisted operational workflows.
- This is a highly technical, hands-on role for someone who can operate across AWS, GCP, Okta, AWS IAM Identity Center, Zero Trust access models, identity governance workflows, and modern AI-enabled engineering environments, while building scalable identity systems through Infrastructure as Code, workflow orchestration, and automation-first security engineering.
- Design and evolve ’s IAM architecture to support a high-scale, cloud-first environment across AWS, GCP, SaaS applications, AI tooling, and remote access platforms.
- Federated identity architecture using SAML, OIDC, OAuth, and SCIM
- Workforce identity and access patterns across internal platforms
- Least-privilege role design and access segmentation
- RBAC and ABAC models for cloud and SaaS environments
- Centralized access models using Okta, AWS IAM Identity Center, Google Cloud IAM, and cloud-native IAM services
- Secure cross-account and cross-project access patterns
- Service account, workload identity, and non-human identity governance
- Zero Trust identity and access control design
- Standardize secure identity and access patterns
- Reduce identity sprawl and excessive permissions
- Improve access visibility and auditability
- Build scalable identity controls for a fast-moving engineering environment
- Own and improve Terraform-based IAM and access automation across ’s cloud and identity environment.
- Reusable Terraform modules for IAM roles, policies, permission sets, group mappings, and access patterns
- Terraform workflows for Okta app assignments, group-based access, and IAM Identity Center automation
- Standardized access modules that can be reused safely across teams and environments
- Policy-as-code patterns for least privilege and permission boundary enforcement
- Terraform-driven onboarding and offboarding flows for identity-related systems
- Automation for service account and workload identity provisioning
- Access reporting and audit visibility pipelines connected to code-based IAM workflows
- Standardization of IAM modules, variables, role definitions, and policy structures
- Repeatability and consistency of access changes
- Reduction of manual IAM operations
- Auditability and change traceability
- Safe rollout of identity changes through code review and pull request workflows
- State management
- Drift detection and remediation
- Rollback planning
- Blast-radius awareness for IAM changes
- Safe promotion of access changes into production
- Build scalable automation for identity lifecycle management, access requests, entitlement changes, access reviews, and day-to-day IAM operations.
- Provisioning and deprovisioning automation
- Access request and approval workflows
- Group-based access assignment and role mapping
- Okta app integration and assignment automation
- IAM Identity Center permission set automation
- Self-service identity workflows for internal teams
- Identity reporting and access visibility pipelines
- Operational tooling that reduces repetitive IAM work
- Terraform and Infrastructure as Code workflows
- Python, Bash, PowerShell, and APIs
- CI/CD systems and Git-based change management
- Okta Workflows and similar orchestration tooling
- ServiceNow, ticketing, and operational workflow integrations
- AI tools such as Claude Code, Codex, and similar engineering assistants
- MCP-enabled integrations, agentic workflows, and internal automation platforms
- Repeatability
- Auditability
- Operational safety
- Reduction of manual IAM work
- Secure-by-default access onboarding
- Lead initiatives to reduce identity-related risk across human and non-human identities.
- Excessive permissions and privilege escalation reduction
- Service account and workload identity hardening
- Long-lived credential reduction
- Cross-account trust policy review and hardening
- Permission boundary enforcement