Cybersecurity ULCM - IAM Expert

Holcim Supplementary Pension Fund; Madrid; On-site; EUR 60,000 - 90,000; Full time

Job summary

HOLCIM Group is seeking an IAM Expert to lead user lifecycle management for employees, covering SSO, MFA and privileged access management across a global scope. This role requires strong Java development skills, IAM architecture knowledge, and experience with SailPoint and federation protocols.

The candidate will collaborate with offshore teams and contribute to DevOps practices in a multicultural environment.

Qualifications

• IT degree or equivalent experience is required.
• Minimum 4 years of Java programming experience.
• Extensive IAM workforce experience with architecture, implementation, and maintenance.
• Experience with Federation Protocols (OAuth, SAML, OpenID) and SSO integrations.

Responsibilities

• Ensure Incident SLA compliance for IAM services and manage backlog.
• Maintain and improve IAM solutions including connectors, rules, workflows, and integrations.
• Develop onboarding plans for applications and integrations.
• Optimize automated access rights provisioning and lifecycle management.
• Perform entitlement analysis and role mining.
• Maintain SSO, MFA, and Privileged Access Management solutions.
• Leverage cloud infrastructure as code for public cloud deployments.
• Coordinate product rollouts across countries and support audits and internal controls.

Skills

Java

IAM expertise

SailPoint

OAuth

SAML

OpenID Connect

Privileged Access

Git

Jenkins

CloudFormation

Elasticsearch

Team collaboration

English proficiency

AI in development

Education

IT degree

Tools

Git

Jenkins

CloudFormation

Elasticsearch

Job description

Date: Sep 3, 2026

Location: MADRID, ES, 28037

Company: HOLCIM Group

Cybersecurity ULCM - IAM Expert

Description

The IAM Expert on User life cycle area within the Cybersecurity department is responsible, together with the team, to offer reliable tools and associated processes which enable the users lifecycle management activities for employees (IAM workforce) during the whole user lifecycle processes within the Holcim Group, supporting also the single sign on, privileged access management and Multi Factor Authentication products and services.

Responsabilities

• Ensure Incident SLA compliance for the IAM services and keep the tasks backlog under control.
• Conclude, maintain and improve the Identity and Access Management solution including connector configuration, custom rule development, workflow configuration and third party system integration
• Develop effective plan for applications on-boarding and integration
• Optimize automatic access rights provisions
• Perform analytical role mining and entitlement analysis
• Conclude maintain and improve Single sign on, Multifactor Authentication and privilege Access management solutions
• Support and manage dynamic infrastructure as a code based on public cloud technologies
• Ensure the online knowledge base, documentation and intranets are accurate, focussed and up to date.
• Manage relationships with business stakeholders consuming the IAM services and products.
• Leverage expertise to support and challenge the team to use efficient and result oriented approaches and ways of working.
• Coordinate the product and services rollouts to additional countries with a worldwide scope.
• Apply the minimum control standards related to user lifecycle process defined by Group internal control to the applications in Scope, assisting also internal control during the Audit (internal & external) exercises.

Position Requirements

• Information technology University degree or equivalent experience
• At least 4 years of experience programming in JAVA
• At least 4 years of experience on IAM workforce performing architecture, implementing and maintaining workforce IAM solutions, ideally with Sailpoint IAM solutions (Identity IIQ or identitynow)
• Hands on sound experience working with Federation Protocols (Oauth, SAML, OpenID), and Single Sign On integrations
• Previous experience designing and implementing Privileged Access Management solutions (Cyberbark, safeguard…).
• High understanding of the User life cycle process, standards and segregation of Duties definition.
• Working knowledge of DevOps Methodologies and tools, leveraging tools such Git, Jenkins, cloud formation, Elastics…
• Works effectively with third parties (including offshore and nearshore service providers)
• High Skills prioritizing, assigning and executing tasks in a high pressure environment.
• Strong communication skills.
• Excellent written, oral and interpersonal communication skills in English. Spanish, French, Arabic, German and/other languages used in the countries in which we operate would be an advantage.
• Extensive experience working in a team-oriented and collaborative environment.
• Experience in working in a multicultural and international environment.
• Strategically thinking based on the business needs.
• Artificial intelligence usage proficiency, mainly in development processes

Other Information

• Value inclusion within the day to day responsibilities by respecting others’ perspectives/ convictions, engaging others’ opinions, creating a safe environment where people, ideas and opinions are valued within the team / “internal” customers and external partners.
• Respect and take into consideration diversity by valuing different world views, challenges and cultures that represent all walks of life and all backgrounds.
• Is sensitive to how people, cultures and organizations function. Deals comfortably with organizational politics. Steer through the organizational maze to get things done.
• Demonstrates positive thinking mindset, consistently identifying highlights.
• Shows a can-do attitude in good and bad times and acts as a role model in terms of ethics and self-awareness.