IAM Architect/Engineer

1ES01 Arinso Iberica S.L.U.; Madrid; Remote; EUR 70,000 - 100,000; Full time

Job summary

Strada Global is seeking an IAM Architect to lead design, implementation, and optimization of enterprise identity solutions across cloud, SaaS, and on‑prem systems. Focus on Entra ID, Entra B2C, SAP, and Workday integrations, balancing security with usability.

This hands‑on leadership role collaborates with security engineers, IT, HR, and business owners to drive a modern IAM strategy and ensure compliant, scalable identity governance.

Qualifications

• 6+ years hands-on IAM experience, including architect/senior engineering roles
• Expertise in Entra ID (Azure AD) and Entra B2C with Microsoft security tools
• Experience integrating IAM with SAP, Workday, and other enterprise apps
• Deep knowledge of SAML, OAuth, OpenID Connect, SCIM, and federation protocols
• Hands-on identity automation, PowerShell scripting, and API-based integrations
• Strong understanding of zero-trust, PAM, and adaptive authentication
• Ability to collaborate with IT, HR, DevOps, and security teams

Responsibilities

• Design and implement scalable IAM architecture using Entra ID, Entra B2C, and other platforms
• Lead integrations across SAP, Workday, SaaS apps, and custom platforms
• Define IAM governance models: RBAC, ABAC, and JIT access
• Support zero-trust IAM principles including MFA and conditional access
• Architect identity lifecycle management and automate provisioning/deprovisioning
• Develop IAM governance and admin risk controls; ensure least privilege

Skills

IAM architecture

Entra ID/Azure AD

Entra B2C

SAP integration

Workday integration

SAML/OAuth/OpenID

PowerShell scripting

API integrations

Zero-trust

PAM

Collaboration with IT/HR/DevOps

Tools

PowerShell

Azure AD

Job description

Position: IAM Architect/Engineer Location: Remote Spain Join us on a journey of endless possibilities At Strada, possibility isn’t just a promise – it’s the foundation of everything we do. We believe in unlocking potential for every colleague, creating a journey of growth, discovery, and impact. With the support, resources, and opportunities we provide, you’ll build a fulfilling future – working on meaningful projects that span industries and regions, contributing to outcomes that matter.

Strada is a people, payroll, and technology leader simplifying international workforce management. Operating in 180+ countries, we design and deliver people-first solutions powered by cloud-based technology – helping organizations grow and enabling workforces to perform at their best.

Learn more at www.stradaglobal.com

Role IAM Strada Global is a leading provider of HR and payroll services, delivering secure and innovative workforce solutions worldwide. As we continue to scale, Identity & Access Management (IAM) is at the heart of our cybersecurity and business enablement strategy, ensuring seamless and secure access for employees, customers, and partners.

Role Overview The IAM Architect will lead the design, implementation, and optimization of enterprise identity and access solutions, ensuring seamless integration across cloud, SaaS, and on-prem systems. This role will focus on Entra ID (Azure AD), Entra B2C, SAP, and Workday integrations, balancing security, user experience, and operational efficiency. This is a hands‑on technical leadership role, working closely with security engineers, infrastructure teams, and business application owners to drive a modern IAM strategy at Strada.

Key Responsibilities

• Identity & Access Architecture Design and implement a scalable IAM architecture utilizing Microsoft Entra ID, Entra B2C, and other identity platforms.
• Lead integration efforts across SAP, Workday, SaaS applications, and custom-built platforms.
• Define IAM governance models, including role‑based access control (RBAC), attribute‑based access control (ABAC), and just‑in‑time (JIT) access.
• Support the adoption of zero‑trust identity principles, including MFA, conditional access, and passwordless authentication.

Identity Lifecycle & Automation

• Architect identity lifecycle management solutions, automating provisioning/deprovisioning across HR, IT, and security systems.
• Implement Identity Governance & Administration (IGA) best practices, ensuring least privilege access and role alignment.
• Develop custom integrations and automation scripts (PowerShell, Python, API‑based solutions) to enhance IAM workflows.
• Collaborate with HR (Workday) and ERP (SAP) teams to synchronize identity management with workforce operations.

Security & Compliance

• Ensure regulatory compliance (GDPR, SOC 2, ISO 27001) by aligning IAM controls with security frameworks.
• Design and enforce privileged access management (PAM) solutions, securing admin accounts and critical systems.
• Support security audits and identity risk assessments, addressing access anomalies and reducing attack surfaces.
• Enhance identity threat detection and response capabilities in collaboration with SOC and SIEM teams.

Required Qualifications

• Experience 6+ years of hands‑on IAM experience, with at least 2 years in an architect or senior engineering role.
• Expertise in Entra ID (Azure AD), Entra B2C, and IAM‑related Microsoft security tools.
• Experience integrating IAM with SAP, Workday, and other enterprise applications.
• Deep knowledge of SAML, OAuth, OpenID Connect, SCIM, and federation protocols.
• Hands‑on experience with identity automation, PowerShell scripting, and API‑based integrations.
• Strong understanding of zero‑trust architecture, privileged access management (PAM), and adaptive authentication.
• Ability to collaborate with IT, HR, DevOps, and security teams to align identity solutions with business needs.

Preferred Qualifications

• Certifications such as Microsoft Certified: Identity and Access Administrator, CISSP, GIAC‑GIAM, or Okta Certified Architect.
• Experience with Azure AD Conditional Access, Defender for Identity, and Entra Permissions Management.
• Knowledge of Identity Governance and Administration (IGA) platforms like SailPoint or Saviynt.
• Familiarity with DevOps and cloud security best practices in AWS/Azure environments.

What We Offer

Opportunity to shape the architecture of mission‑critical cloud applications. Collaborative and innovative work environment. At Strada, our values guide everything we do: Anticipate Customer Needs – We stay ahead of trends so our customers can grow and succeed. Own the Outcome – We take responsibility for delivering excellence and ensuring things get done right. Challenge Ourselves to Work Smarter – We move faster than the world around us to drive change and accomplish more. Empower Each Other to Solve Problems – We tackle challenges head on, ask tough questions, and collaborate to find the best solutions. Care About Our Work – We understand that what we do impacts millions, and we have a responsibility to get it right.

Benefits

At Strada, we support your whole self—offering a range of benefits for your health, wellbeing, finances, and future. These include health coverage, wellbeing programs, paid leave (vacation, sick, parental), retirement plans, learning opportunities, and more. All offers are contingent on successful completion of background checks, where permitted by law and as appropriate for the role. These may include identity, education, employment, and in some cases, criminal history verification, checks against global watchlists, credit reports, and/or drug testing. You’ll be informed of the specific checks applicable to your role and location during the recruitment process.

Our commitment to Diversity and Inclusion

Strada is dedicated to fostering a diverse, equitable, and inclusive workplace where everyone feels valued and supported. We believe that embracing differences strengthens our teams and drives innovation and success.

Diversity Policy Statement

Strada is an Equal Opportunity Employer and prohibits discrimination based on legally protected characteristics. We provide reasonable accommodations for disabilities and religious practices. Applicants may request reasonable accommodation by contacting their recruiter.

Authorization to work in the Employing Country

To be considered, you must have current and future work authorization in the country where you're applying, without the need for visa sponsorship by Strada. Please note: This job description does not limit Strada’s right to assign or reassign responsibilities, including to subsidiaries, partners, or future business purchasers.

DISCLAIMER

Nothing in this job description restricts management's right to assign or reassign duties and responsibilities of this job to other entities; including but not limited to subsidiaries, partners, or purchasers of Strada business units.

As pioneers in payroll, human capital and financial management solutions, we blend leading‑edge technology with human ingenuity to keep you moving forward. Our team of over 8,000 experts bring decades of deep knowledge and experience to businesses around the globe helping them design and deliver at scale. Supporting over 1,400 customers across 33 countries, we embed ourselves at every stage of your journey, to help you drive your vision to value.