Cloud IAM Engineer: Azure & GCP, SailPoint & PAM

Senior Identity And Access Management Engineer - Cloud Environment; Madrid; On-site; EUR 90,000 - 130,000; Full time

Job summary

Roche Madrid seeks a Senior Identity and Access Management Engineer to lead multi-cloud IAM initiatives across Azure, GCP, and AWS. You will design centralized RBAC, IAM governance, and automation using Terraform, GitLab CI/CD, and SailPoint PingFederate, ensuring security and compliance in a regulated environment.

You will mentor teams, engage stakeholders, and drive continuous improvement in identity security across SaaS and on‑premises environments.

Qualifications

• Bachelor's degree in computer science, engineering or related discipline, or equivalent work experience.
• Industry accreditation or security certifications are desirable for ongoing skill maintenance.
• Proven ability to manage relationships with diverse stakeholders on medium to large engagements.
• Experience championing accountability in security incidents or project ownership.

Responsibilities

• Lead end-to-end security analysis within a multi-cloud IAM domain including Azure, GCP and AWS.
• Design and implement centralized RBAC and IAM governance aligned with CAF principles.
• Develop and maintain IAM infrastructure using IaC (Terraform) and CI/CD pipelines (GitLab).
• Apply PAM strategies (Just-in-Time access) and enforce least privilege across environments.
• Provide 2nd- and 3rd-level support for Identity Management infrastructure and drive operational excellence.

Skills

IAM concepts

Cloud IAM

RBAC design

SailPoint IQ

PingFederate

Terraform

GitLab CI/CD

Stakeholder mgmt

IT operations

Security incident lead

Education

Bachelor’s degree in CS/Engineering

Industry cert desirable

Tools

SailPoint IQ

PingFederate

Terraform

Azure AVM

GitLab

CyberArk

Job description

Roche Madrid seeks a Senior Identity and Access Management Engineer to lead multi-cloud IAM initiatives across Azure, GCP, and AWS. You will design centralized RBAC, IAM governance, and automation using Terraform, GitLab CI/CD, and SailPoint PingFederate, ensuring security and compliance in a regulated environment.

You will mentor teams, engage stakeholders, and drive continuous improvement in identity security across SaaS and on‑premises environments.