Senior Identity Security Engineer

New

ScopelyVideo games

Work Arrangement: ['Remote']; Location: ['Spain']; remote basis or hybrid basis if located in BarcelonaFull-TimeSenior

Salary not disclosed

Apply NowOpens the employer's application page

Job Details

Experience: 5+ years of experience in IAM, or identity-focused cloud/security engineering
Required Skills: PythonOAuthTerraform

Bring 5+ years of experience in IAM or identity-focused cloud/security engineering, including hands-on ownership of production identity controls in complex environments.
Have strong experience with Okta or a comparable workforce identity platform and AWS/GCP IAM.
Know federation and provisioning protocols such as SAML, OIDC, OAuth, and SCIM.
Have production experience building, testing, and operating identity services or automation using Terraform or comparable infrastructure as code.
Use Python, Go, or TypeScript, APIs, version control, and CI/CD in identity engineering work.
Have strong knowledge of least privilege, just-in-time privileged access, identity lifecycle and governance, authentication controls, and non-human or workload identity risk.
Have experience threat-modeling identity architectures, integrations, and access paths, and driving remediation with service owners.
Have hands-on experience building AI-native workflows in which agents carry out multi-step work, with human approval where needed.
Have working fluency with harness engineering and multi-agent development, including permissions, context and data scoping, evaluations, orchestration, and observability.
Be able to lead technical work from design through deployment and operations, and explain identity risks and implementation choices to stakeholders.
Have experience with identity governance, privileged access, or cloud entitlement tooling, or have built an equivalent in-house.

Reduce standing and excessive access with least-privilege roles, just-in-time elevation, and automated access reviews.
Build repeatable identity workflows for onboarding, approvals, role changes, reviews, and offboarding.
Govern service accounts, workload and CI/CD identities, API credentials, AI agents, and their integrations.
Protect critical systems with phishing-resistant authentication, device trust, controlled privileged access, and prompt session revocation.
Threat-model identity platforms, integrations, and access paths, and build telemetry and response workflows for identity risks.
Design and test break-glass and recovery procedures for identity services and cloud access.
Build reusable identity controls and services using infrastructure as code, APIs, scripting, and delivery pipelines.
Design multi-agent workflows for identity risk, access attestations, and access remediation, with scoped tools, permissions, evaluations, orchestration, and observability.
Work with game and platform stakeholders to adopt shared identity patterns and measure identity-risk and manual-work reduction.
Produce audit-ready evidence for access reviews, privileged access, and identity lifecycle events.

View Full Description & ApplyYou'll be redirected to the employer's site