IAM Architect/Engineer

Strada; Madrid; Remote; EUR 80,000 - 110,000; Full time

Job summary

Strada is seeking an IAM Architect/Engineer to lead design and implementation of enterprise identity solutions. You will focus on Entra ID, Entra B2C, SAP, and Workday integrations, balancing security with user experience and operational efficiency.

As a hands-on technical leader, you will collaborate with security, infrastructure, HR, and business-app teams to drive a modern IAM strategy for Strada, ensuring governance and zero-trust principles across projects.

Qualifications

• 6+ years of hands-on IAM experience with at least 2 years in architect/senior role.
• Expertise with Entra ID (Azure AD), Entra B2C, and Microsoft security tools.
• Experience integrating IAM with SAP, Workday, and other enterprise apps.
• Deep knowledge of SAML, OAuth, OpenID Connect, SCIM, and federation protocols.
• Hands-on identity automation, PowerShell scripting, and API-based integrations.
• Strong understanding of zero-trust, PAM, and adaptive authentication.
• Ability to collaborate with IT, HR, DevOps, and security teams.

Responsibilities

• Lead design, implementation, and optimization of enterprise IAM solutions across cloud, SaaS, and on-prem systems.
• Focus on Entra ID, Entra B2C, SAP, and Workday integrations balancing security and UX.
• Define governance models including RBAC, ABAC, and JIT access.
• Support zero-trust adoption with MFA, conditional access, and passwordless auth.
• Architect identity lifecycle management and automation across HR, IT, and security.
• Develop IAM governance and least-privilege controls; enable audits.

Skills

IAM architecture

Security governance

Cross-functional collaboration

Zero-trust concepts

Education

Bachelor's degree in CS / IT

Tools

Entra ID (Azure AD)

Entra B2C

SAP

Workday

SAML/OAuth/OIDC

PowerShell

API integrations

Job description

Position: IAM Architect/Engineer

Location: Remote Spain

Join us on a journey of endless possibilities

At Strada, possibility isn't just a promise – it's the foundation of everything we do. We believe in unlocking potential for every colleague, creating a journey of growth, discovery, and impact.

With the support, resources, and opportunities we provide, you’ll build a fulfilling future - working on meaningful projects that span industries and regions, contributing to outcomes that matter.

Strada is a people, payroll, and technology leader simplifying international workforce management. Operating in 180+ countries, we design and deliver people-first solutions powered by cloud-based technology - helping organizations grow and enabling workforces to perform at their best.

Learn more at www.stradaglobal.com

Role

IAM Strada Global is a leading provider of HR and payroll services, delivering secure and innovative workforce solutions worldwide. As we continue to scale, Identity & Access Management (IAM) is at the heart of our cybersecurity and business enablement strategy, ensuring seamless and secure access for employees, customers, and partners.

Role Overview

• The IAM Architect will lead the design, implementation, and optimization of enterprise identity and access solutions, ensuring seamless integration across cloud, SaaS, and on-prem systems.
• This role will focus on Entra ID (Azure AD), Entra B2C, SAP, and Workday integrations, balancing security, user experience, and operational efficiency.
• This is a hands-on technical leadership role, working closely with security engineers, infrastructure teams, and business application owners to drive a modern IAM strategy at Strada.

Key Responsibilities

• Identity & Access Architecture Design and implement a scalable IAM architecture utilizing Microsoft Entra ID, Entra B2C, and other identity platforms.
• Lead integration efforts across SAP, Workday, SaaS applications, and custom-built platforms.
• Define IAM governance models, including role-based access control (RBAC), attribute-based access control (ABAC), and just-in-time (JIT) access.
• Support the adoption of zero-trust identity principles, including MFA, conditional access, and passwordless authentication.
• Identity Lifecycle & Automation
• Architect identity lifecycle management solutions, automating provisioning/deprovisioning across HR, IT, and security systems.
• Implement Identity Governance & Administration (IGA) best practices, ensuring least privilege access and role alignment.
• Develop custom integrations and automation scripts (PowerShell, Python, API-based solutions) to enhance IAM workflows.
• Collaborate with HR (Workday) and ERP (SAP) teams to synchronize identity management with workforce operations.
• Security & Compliance Ensure regulatory compliance (GDPR, SOC 2, ISO 27001) by aligning IAM controls with security frameworks.
• Design and enforce privileged access management (PAM) solutions, securing admin accounts and critical systems.
• Support security audits and identity risk assessments, addressing access anomalies and reducing attack surfaces.
• Enhance identity threat detection and response capabilities in collaboration with SOC and SIEM teams.

Required Qualifications

• Experience 6+ years of hands-on IAM experience, with at least 2 years in an architect or senior engineering role.
• Expertise in Entra ID (Azure AD), Entra B2C, and IAM-related Microsoft security tools.
• Experience integrating IAM with SAP, Workday, and other enterprise applications.
• Deep knowledge of SAML, OAuth, OpenID Connect, SCIM, and federation protocols.
• Hands-on experience with identity automation, PowerShell scripting, and API-based integrations.
• Strong understanding of zero-trust architecture, privileged access management (PAM), and adaptive authentication.
• Ability to collaborate with IT, HR, DevOps, and security teams to align identity solutions with business needs.

Preferred Qualifications

• Certifications such as Microsoft Certified: Identity and Access Administrator, CISSP, GIAC-GIAM, or Okta Certified Architect.
• Experience with Azure AD Conditional Access, Defender for Identity, and Entra Permissions Management.
• Knowledge of Identity Governance and Administration (IGA) platforms like SailPoint or Saviynt.
• Familiarity with DevOps and cloud security best practices in AWS/Azure environments.

What We Offer

• Opportunity to shape the architecture of mission-critical cloud applications.
• Collaborative and innovative work environment.

At Strada, Our Values Guide Everything We Do

• Anticipate Customer Needs – We stay ahead of trends so our customers can grow and succeed.
• Own the Outcome – We take responsibility for delivering excellence and ensuring things get done right.
• Challenge Ourselves to Work Smarter – We move faster than the world around us to drive change and accomplish more.
• Empower Each Other to Solve Problems – We tackle challenges head on, ask tough questions, and collaborate to find the best solutions.
• Care About Our Work – We understand that what we do impacts millions, and we have a responsibility to get it right.

Benefits

At Strada, we support your whole self - offering a range of benefits for your health, wellbeing, finances, and future. These include health coverage, wellbeing programs, paid leave (vacation, sick, parental), retirement plans, learning opportunities, and more. All offers are contingent on successful completion of background checks, where permitted by law and as appropriate for the role. These may include identity, education, employment, and in some cases, criminal history verification, checks against global watchlists, credit reports, and/or drug testing. You’ll be informed of the specific checks applicable to your role and location during the recruitment process.

Our commitment to Diversity and Inclusion

Strada is dedicated to fostering a diverse, equitable, and inclusive workplace where everyone feels valued and supported. We believe that embracing differences strengthens our teams and drives innovation and success.

Diversity Policy Statement

Strada is an Equal Opportunity Employer and prohibits discrimination based on legally protected characteristics. We provide reasonable accommodations for disabilities and religious practices. Applicants may request reasonable accommodation by contacting their recruiter.

Authorization to work in the Employing Country

To be considered, you must have current and future work authorization in the country where you're applying, without the need for visa sponsorship by Strada.

Please note: This job description does not limit Strada’s right to assign or reassign responsibilities, including to subsidiaries, partners, or future business purchasers.

We offer you a competitive total rewards package, continuing education & training, and tremendous potential with a growing worldwide organization.

Disclaimer

Nothing in this job description restricts management's right to assign or reassign duties and responsibilities of this job to other entities; including but not limited to subsidiaries, partners, or purchasers of Strada business units.