IAM Engineer: MFA, SSO & EntraID Specialist

Thomson Reuters; Madrid; Hybrid; EUR 23,000 - 42,000; Full time

Benefits offered by this job

Hybrid Work Model

Flex My Way - work-life policies

Mental Health Days

Headspace app access

Tuition reimbursement

Retirement savings

Employee incentive programs

Volunteer days

Awards and recognition

Job summary

Thomson Reuters seeks an Identity & Access Management (IAM) Engineer to transform its identity landscape. You will administer MFA, Access Governance, EntraID, and SSO/Federation, driving automation and high availability across cloud and on‑prem environments.

Join a global IAM team delivering secure, scalable identity solutions with strong emphasis on integration, automation, and continuous improvement within a flexible hybrid work model.

Qualifications

• 3+ years of experience designing, developing Memority, and implementing IAM security technologies including MEMORITY, Entra, Active Directory, Access Governance, and LDAP
• Strong hands-on experience with SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), Kerberos, NTLM, LDAP, and RADIUS
• Proven experience integrating, developing Memority, and automating MFA and authentication protocols
• Deep understanding of Identity domains: Authentication, Authorization, Access Management, and Attestation
• Experience with Memority Federate including adapter configuration, SP/IdP connections, metadata management, and SSL certificates
• Hands-on experience with Memority Access integration with Memority Federate to protect applications using Memority Access Tokens
• Demonstrated experience with API security concepts, including integration with Open AM, SiteMinder, OAuth 2.0, JWT tokens, and certificate-based authentication
• Familiarity with cloud platforms (AWS preferred) and understanding of dynamic computing's impact on Identity
• Proven ability to deliver PoCs for identity and API security integrations

Responsibilities

• Administer and implement security across IAM technologies including MEMORITY, Microsoft Entra, Active Directory, Access Governance, and LDAP directories
• Configure and troubleshoot Single Sign-On (SSO) for enterprise applications using SAML, OAuth, Kerberos, and NTLM
• Implement OpenID Connect (OIDC) and OAuth 2.0 solutions using MEMORITY tools
• Manage and maintain MEMORITY Directory Server, including cluster management and timely replication
• Administer and performance-tune MEMORITY/MSFT EntraID to support high-traffic enterprise workloads
• Deploy and support highly available, scalable MEMORITY infrastructure on AWS and on-premises enabling SSO and federation for internal access
• Configure MEMORITY Access servers, Gateways, and Agents to protect enterprise resources
• Manage federation services between SiteMinder and Memority Federate for SAML and WS-FED based migrations
• Work with Memority Federate adapters including HTML Form, x509, Kerberos, OpenToken, Memority ID, and Composite adapters
• Coordinate with vendor teams to resolve hardware and software issues
• Lead vulnerability mitigation and patch management activities, including upgrades
• Prepare documentation and runbooks for Operations
• Act as first-level escalation support for IAM operations and other IT security functions
• Drive automation and integration capabilities within IAM solutions

Skills

IAM design

MFA

SAML 2.0

OAuth 2.0

OIDC

LDAP

Active Directory

EntraID

SSO

Federation

Tools

MEMORITY

Microsoft Entra

SiteMinder

OpenID Connect tools

OAuth 2.0 tooling

Job description

Thomson Reuters seeks an Identity & Access Management (IAM) Engineer to transform its identity landscape. You will administer MFA, Access Governance, EntraID, and SSO/Federation, driving automation and high availability across cloud and on‑prem environments.

Join a global IAM team delivering secure, scalable identity solutions with strong emphasis on integration, automation, and continuous improvement within a flexible hybrid work model.