Identity & Access Governance Engineer

Bunge; Sant Just Desvern; Presencial; EUR 90.000 - 120.000; Jornada completa

Descripción de la vacante

Bunge is seeking an Identity and Access Management Engineer to join its Global IAM team in Sant Just Desvern. You will configure, operate, and troubleshoot the IGA solution to ensure secure user access across the enterprise.

As IAM SME, you will influence governance decisions, drive improvements, and collaborate with cybersecurity, IT Operations, HR, and business units while mentoring colleagues and supporting audits.

Formación

• 10+ years in IT, with at least 6 years in Identity and Access Management or cybersecurity-related roles.
• Bachelor of Science in CS/IS/Engineering/Programming.
• IGA platform knowledge (SailPoint ISC preferred) and/or security certifications are a plus.
• Deep knowledge of IAM concepts, including lifecycle management, access certifications, RBAC/ABAC, SoD.
• Experience with SailPoint ISC/IQ, Saviynt, One Identity Manager; integration via APIs, connectors, SCIM, JDBC.
• Proficiency in scripting and coding (PowerShell, JSON).
• Cloud security principles and IAM integration with Azure/AWS.
• Familiarity with GDPR, ISO 27001, SOX, NIST frameworks; strong governance.
• Ability to collaborate with BT, HR, Audit and other stakeholders.
• Strong analytical, problem-solving, and communication skills; independent work capability.

Responsabilidades

• Manage and enhance the IGA platform and lifecycle workflows.
• Configure joiner/mover/leaver processes and access certification campaigns.
• Develop reports and dashboards to track KPIs and exceptions.
• Onboard applications into the IGA platform via APIs, connectors, and scripts.
• Automate provisioning, deprovisioning, and review processes with IGA workflows.
• Provide L2/L3 support and troubleshoot platform issues.
• Collaborate with BT, HR and other stakeholders to enable IAM governance.
• Drive continuous improvement of the IAM program and tools.
• Identify AI opportunities within IAM and mentor teammates.
• Support audits by providing information and validating issues.

Conocimientos

Analytical thinking

Problem solving

Communication skills

Independent work

Scripting (PowerShell)

Educación

Bachelor’s degree in Computer Science/Information Systems/Engineering/Programming

IGA platform certifications (e.g., SailPoint ISC, CISSP, CISM, CIAM)

Herramientas

PowerShell

JSON

Descripción del empleo

City : Sant Just Desvern State : Barcelona (ES-B) Country : Spain (ES) Requisition Number : 46145

Overview

The Identity and Access Management Engineer is part of the broader Bunge Global Identity and Access Management (IAM) team. You will be responsible for configuring, operating, and troubleshooting Bunge's Identity Governance & Administration (IGA) solution to ensure secure, compliant, and efficient user access management across the enterprise. As a Subject Matter Expert (SME) in IGA, you will influence IAM design decisions and governance models. This position offers technical challenges, a dynamic environment for collaboration with diverse stakeholders across cybersecurity functions as well as with other business units, and continuous learning within a leading global organization.

Key Responsibilities

• Manage IGA Platform:
• Administer and enhance Bunge's IGA platform
• Configure and maintain joiner-mover-leaver (JML) lifecycle processes, access request workflows, approval processes, access certification campaigns, role models (RBAC/ABAC) and Segregation of Duties (SoD) policies
• Analyze and optimize role mining activities
• Develop reports / dashboards to identify and track exceptions and/or KPIs
• Lead Application Integration:
• Work with application owners to onboard applications into the IGA platform via APIs, connectors, and custom scripts
• Automate provisioning/deprovisioning/review processes using IGA workflows
• Provide Operational Support:
• Provide L2/L3 support for IGA platform-related issues
• Troubleshoot IGA platform issues (e.g., provisioning, certification, integration)
• Perform system configuration changes
• Collaborate with Stakeholders: Work effectively with various internal stakeholders, including Business Technology (BT) (Cybersecurity, IT Operations, Application Development) and HR to facilitate seamless IAM governance.
• Drive Continuous Improvement: Contribute to the ongoing enhancement of Bunge's IAM program, processes, tools, and policies, influencing operational effectiveness.
• AI for IAM: Identify and pilot opportunities for leveraging Artificial Intelligence (AI) within the scope of IAM.
• Support and Mentorship: Provides technical leadership and mentorship to other IAM colleagues.
• Support Audit and Compliance Efforts: Collaborate with internal and external auditors by providing requested information, explaining IAM processes, and assisting with issue validation.

Education, Experience and Certifications

• 10+ years in the IT field, being a minimum of 6 years in Identity and Access Management or cybersecurity-related functions
• Bachelor of Science degree in Computer Science, Information Systems, Engineering, or Programming
• IGA platform (SailPoint ISC preferred) and/or security-related (e.g., CISSP, CISM, CIAM) certifications are a plus
• In-depth knowledge of IAM concepts, technologies, and best practices (e.g., identity lifecycle management, access certifications, role-based access control, privileged access management)
• Proficiency in configuring, managing and troubleshooting IGA platforms (e.g., SailPoint ISC/IQ, Saviynt, One Identity Manager)
• Proficiency in integrating business applications of different nature (e.g., cloud vs. on-premises, market vs. internally developed) with IGA platforms through various means (e.g., pre-built connectors, REST or SOAP APIs, Web Services, SCIM, JDBC)
• Experience with other IAM, security or IT Service Management (ITSM)-related platforms (e.g. Service Now) is a plus.
• Proficiency in scripting and coding languages (e.g., PowerShell, JSON)
• Working knowledge of cloud security principles and IAM integration with cloud platforms (Azure, AWS)
• Strong understanding of security frameworks, compliance standards (e.g., SOX, NIST Cybersecurity Framework, GDPR, ISO 27001), and regulatory requirements impacting IAM
• Collaborate effectively with stakeholders outside the IAM team, either BT teams or business (HR, Audit)
• Strong analytical, critical thinking, problem-solving skills with the ability to assess complex IAM and compliance challenges and design scalable solutions.
• Excellent communication skills (written and verbal) skills, with the ability to articulate technical concepts in a clear and concise manner
• Ability to work independently with limited supervision in a fast-paced, dynamic environment

At Bunge (NYSE: BG), our purpose is to connect farmers to consumers to deliver essential food, feed and fuel to the world. As a premier agribusiness solutions provider, our team of 34,000 dedicated employees partner with farmers across the globe to move agricultural commodities from where they’re grown to where they’re needed—in faster, smarter, and more efficient ways. We are a world leader in grain origination, storage, distribution, oilseed processing and refining, offering a broad portfolio of plant-based oils, fats, and proteins. We work alongside our customers at both ends of the value chain to deliver quality products and develop tailored, innovative solutions that address evolving consumer needs. With 200+ years of experience and presence in over 50 countries, we are committed to strengthening global food security, advancing sustainability, and helping communities prosper where we operate. Bunge has its registered office in Geneva, Switzerland and its corporate headquarters in St. Louis, Missouri. Learn more at Bunge.com.

• We Are One Team - Collaborative, Respectful, Inclusive
• We Lead The Way - Agile, Empowered, Innovative
• We Do What's Right - Safety, Sustainability, With Integrity

If this sounds like you, join us! We value and invest in people who believe in our purpose and are excited to live it every day - people who are #ProudtoBeBunge