IAM Engineer

Factorial; España; Híbrido; EUR 50.000 - 65.000; Jornada completa

Descripción de la vacante

A leading software company in Spain is seeking a Senior Systems Administrator to enhance their identity and device management platforms. This hybrid role requires expertise in Azure, Jira Service Management, and IAM, with a focus on security and automation. The ideal candidate has over 5 years of experience and a strong capability to mentor team members. The salary range is between 50,000€ and 65,000€, along with various employee perks and a commitment to diversity.

Servicios

High growth, multicultural environment

Continuous training and learning

Private health insurance

Gym and health classes

Language classes

Salary management services

Formación

• 5+ years administering corporate platforms and 3+ years focused on IAM and cloud.
• Master Azure and Entra ID functionalities.
• Experience with Jira Service Management workflows.
• Hands-on experience administering Google Workspace.

Responsabilidades

• Administer Azure resources and policies.
• Operate Microsoft Entra ID lifecycle management.
• Define and track SLAs/OLAs in Jira Service Management.
• Drive automation and implement compliance controls.

Conocimientos

IAM

Azure

Jira Service Management

Device Management

Google Workspace

Scripting

Herramientas

Jamf Pro

PowerShell

Terraform

Descripción del empleo

Hi! We're looking for a Senior Systems Administrator (IAM • Azure/Entra • Jira Service Management • Jamf • Google Workspace) to take our identity, devices, and core platforms to the next level.

The Role

You'll be the technical reference for Infrastructure & Identity with end‑to‑end ownership. You will design and operate identity, access, and device lifecycle, driving automation, security, and operational excellence. You're comfortable with ambiguity, you prioritize with sound judgment, and you teach the team when needed-stepping into a mentor role naturally.

This position follows a hybrid model: 3 days on-site and 2 days remote per week. Fluency in English and Spanish is required for this role.

What You'll Do

Azure & Microsoft Entra ID (Azure AD)

• Administer Azure Resource Groups, policies, tagging, cost management, and least‑privilege standards.
• Operate Microsoft Entra ID: Conditional Access, PIM, groups/roles, access reviews, and license assignment/optimization (including automation).

• Operate the joiner‑mover‑leaver (JML) lifecycle with SCIM provisioning/de‑provisioning, SSO (SAML/OIDC), MFA, RBAC, and dynamic groups.
• Build and maintain API and GraphQL integrations for identity workflows and auditing.
• Define security baselines, hardening standards, and compliance controls.

Jira Service Management (JSM)

• Own the service catalog, request forms, and approval flows.
• Define and track SLAs/OLAs, queues, and automations (rules/webhooks).

Device & Endpoint Management

• Experience with MDM platforms (Jamf Pro, Intune, Workspace ONE, Kandji, Meraki).
• Skilled in zero‑touch enrollment, policies/profiles, patching, and compliance management.

Google Workspace

• Administer OUs, groups, security, DLP, and SSO; align identity attributes/sync with Entra ID/SCIM when appropriate.

Reliability, Automation & Documentation

• Implement monitoring/logging/alerting, backups, and disaster recovery.
• Drive automation (e.g., PowerShell/Bash/Python; Terraform/Git preferred).

Collaboration

• Partner with Security, Support, Compliance, Product, Procurement and Legal to balance user experience, cost, and risk.

What We're Looking For

You're likely a great fit if you:

• Have 5+ years administering corporate platforms and 3+ years focused on IAM and cloud.
• Master Azure (Resource Groups, policies, tagging) and Entra ID (Conditional Access, PIM, RBAC) and understand licensing models and operations.
• Are strong IAM with SCIM, SSO (SAML/OIDC), APIs, and GraphQL for access and auditing.
• Have hands‑on Jira Service Management experience-workflows, SLAs, automations, and service portal.
• Run Jamf Pro for macOS/iOS at an medium level.
• Administer Google Workspace (security, directory, Vault/DLP, groups, SSO, CCA).
• Show high adaptability, clear prioritization, and ownership from start to finish.
• Enjoy teaching and mentoring-you communicate clearly, document well, and elevate the team.

Nice to Have

• Scripting (PowerShell, Bash, Python), IaC (Terraform)
• Security/compliance frameworks (ISO 27001, SOC 2, GDPR) and CIS hardening.
• Experience in hyper‑growth environments.

Compensation

The salary range for this position is between 50.000€ and 65.000€. We won't consider how many years of experience you have but your knowledge and skills.

Perks of being part of our team

• High growth, multicultural and friendly environment
• Continuous training and learning based on your needs
• Alan private health insurance
• Healthy life with Wellhub(Gyms, pools, outdoor classes)
• Save expenses with Cobee
• Language classes with Preply
• Get the most out of your salary with Payflow

And when at the office...

• Breakfast in the office and organic fruit
• Nora and Apetit discounts
• Pet Friendly

Join Factorial, where people grow

We care about people and we also offer a lot of benefits for employees:

Diversity is part of our culture, we have more than 43 nationalities in our teams and we are infused in an inclusive environment for all employees and candidates. Please feel free to apply with the way it suits you better! (blind resume, identity pronouns, cover letter, etc). We do not discriminate on any aspect, in fact; Factorial encourages everyone to join us!

About us

Factorial is an innovative Business Management Software solution designed to streamline company processes for small and medium‑size enterprises. Founded in 2016, our mission is to help companies automate workflows, centralize people data, and make better business decisions. With customers across over 60 countries worldwide, we've built a diverse team that's driving change in the business management tech space. Join us as we continue our rapid growth journey!

Our Values

• We own it: We take responsibility for every project. We make decisions, not excuses.
• We learn and teach: We're dedicated to learning something new every day and, above all, sharing it.
• We partner: Every decision is a team decision. We trust each other.
• We grow fast: We act fast. We believe that the worst mistake is learning from them.

Wanna learn more about us? Check our website!