Global IAM Architect: Entra ID, SSO & MFA Strategy

Surventis; Marchamalo; Híbrido; EUR 90.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Subsidized canteen on site

Free company shuttle Alcalá–Marchamalo

Flexible benefits package

Career development opportunities

Descripción de la vacante

BASF in Spain invites an IAM Architect to design and evolve our global Identity & Access Management landscape, coordinating with cybersecurity, SAP, applications, and MSPs. You will ensure secure, scalable IAM operations across Entra ID/Azure AD, SSO, MFA, PIM/PAM, joiner/mover/leaver, and PKI.

The role requires degree in CS or related, several years IAM, strong SAP footprint, and travel to sites including Münster, Germany; fluent in Spanish and English.

Formación

• Degree in computer science or comparable qualification.
• Several years of practical IAM experience, ideally in an international industrial environment with SAP footprint.
• Broad IAM expertise across multiple domains and strong hands-on knowledge of core IAM solutions.
• Experience with Entra ID / Azure AD, governance, SSO, MFA, and PKI.
• Ability to coordinate with MSPs and translate business requirements into scalable solutions.

Responsabilidades

• Define and evolve the global IAM strategy with security and infrastructure teams.
• Design end-to-end IAM architecture across joiner/mover/leaver processes.
• Act as professional counterpart to MSPs and govern external service delivery.
• Ensure secure, compliant IAM operations and integration with enterprise IT.
• Provide hands-on design, integration, and troubleshooting support.
• Support projects and stakeholders on IAM-related topics.

Conocimientos

IAM architecture

Communication skills

Fluent in Spanish and English

Team collaboration

Educación

Degree in Computer Science or related

Herramientas

Entra ID/Azure AD

SailPoint

CyberArk

SuccessFactors

ServiceNow

Keeper

DigiCert

Descripción del empleo

BASF in Spain invites an IAM Architect to design and evolve our global Identity & Access Management landscape, coordinating with cybersecurity, SAP, applications, and MSPs. You will ensure secure, scalable IAM operations across Entra ID/Azure AD, SSO, MFA, PIM/PAM, joiner/mover/leaver, and PKI.

The role requires degree in CS or related, several years IAM, strong SAP footprint, and travel to sites including Münster, Germany; fluent in Spanish and English.