Identity and Access Management Engineer

Bunge; Sant Just Desvern; Presencial; EUR 80.000 - 105.000; Jornada completa

Descripción de la vacante

Bunge is seeking an Identity and Access Management Engineer to design, operate, and optimize our IGA platform across the enterprise. You will partner with cybersecurity, IT operations, and HR to ensure secure access governance.

The role emphasizes JML, access certifications, risk-based RBAC/SoD, and API-driven app onboarding, with opportunities to apply AI in IAM and mentor team members.

Formación

• 10+ years in IT with at least 6 years in Identity and Access Management or cybersecurity-related functions
• Bachelor of Science degree in Computer Science, Information Systems, Engineering, or Programming
• IGA platform experience (SailPoint ISC preferred) and/or security-related certifications are a plus
• In-depth knowledge of IAM concepts, technologies, and best practices (identity lifecycle management, access certifications, RBAC, PAM)
• Proficiency in configuring, managing and troubleshooting IGA platforms (SailPoint ISC/IQ, Saviynt, One Identity Manager)
• Proficiency in integrating business applications with IGA platforms through pre-built connectors, REST, SOAP APIs, Web Services, SCIM, JDBC
• Experience with ITSM platforms (e.g., ServiceNow) is a plus
• Proficiency in scripting and coding languages (PowerShell, JSON)
• Working knowledge of cloud security principles and IAM integration with cloud platforms (Azure, AWS)
• Strong understanding of security frameworks, compliance standards (SOX, NIST, GDPR, ISO 27001)
• Excellent communication with stakeholders and ability to work independently

Responsabilidades

• Manage and enhance Bunge’s IGA platform
• Configure and maintain JML lifecycle processes, workflows, approvals, access certification campaigns and SoD policies
• Analyze and optimize role mining activities
• Develop reports and dashboards to track exceptions and KPIs
• Onboard applications into the IGA platform via APIs, connectors, and scripts
• Automate provisioning/deprovisioning/review processes using IGA workflows
• Provide L2/L3 support and troubleshoot IGA platform issues
• Collaborate with Business Technology and HR to govern IAM
• Drive continuous improvement and pilot AI opportunities in IAM
• Provide mentorship to IAM colleagues and support audits

Conocimientos

IAM concepts

Analytical thinking

Communication skills

Problem solving

Independent work

Educación

Bachelor's degree in CS/IS/Engineering

Herramientas

SailPoint ISC/IQ

Saviynt

One Identity Manager

ServiceNow

REST/JSON APIs

PowerShell

Descripción del empleo

Location

City: Sant Just Desvern State: Barcelona (ES-B) Country: Spain (ES) Requisition Number: 46142

Overview

The Identity and Access Management Engineer is part of the broader Bunge Global Identity and Access Management (IAM) team. You will be responsible for configuring, operating, and troubleshooting Bunge’s Identity Governance & Administration (IGA) solution to ensure secure, compliant, and efficient user access management across the enterprise. As a Subject Matter Expert (SME) in IGA, you will influence IAM design decisions and governance models. This position offers technical challenges, a dynamic environment for collaboration with diverse stakeholders across cybersecurity functions as well as with other business units, and continuous learning within a leading global organization.

Key Responsibilities

• Manage IGA Platform
  • Administer and enhance Bunge’s IGA platform
  • Configure and maintain joiner–mover–leaver (JML) lifecycle processes, access request workflows, approval processes, access certification campaigns, role models (RBAC/ABAC) and Segregation of Duties (SoD) policies
  • Analyze and optimize role mining activities
  • Develop reports / dashboards to identify and track exceptions and/or KPIs
• Lead Application Integration
  • Work with application owners to onboard applications into the IGA platform via APIs, connectors, and custom scripts
  • Automate provisioning/deprovisioning/review processes using IGA workflows
• Provide Operational Support
  • Provide L2/L3 support for IGA platform-related issues
  • Troubleshoot IGA platform issues (e.g., provisioning, certification, integration)
  • Perform system configuration changes
• Collaborate with Stakeholders
  • Work effectively with various internal stakeholders, including Business Technology (BT) (Cybersecurity, IT Operations, Application Development) and HR to facilitate seamless IAM governance.
  • Drive Continuous Improvement: Contribute to the ongoing enhancement of Bunge's IAM program, processes, tools, and policies, influencing operational effectiveness.
  • AI for IAM: Identify and pilot opportunities for leveraging Artificial Intelligence (AI) within the scope of IAM.
  • Support and Mentorship: Provides technical leadership and mentorship to other IAM colleagues.
  • Support Audit and Compliance Efforts: Collaborate with internal and external auditors by providing requested information, explaining IAM processes, and assisting with issue validation.

Education, Experience and Certifications

• 10+ years in IT, with at least 6 years in Identity and Access Management or cybersecurity-related functions
• Bachelor of Science degree in Computer Science, Information Systems, Engineering, or Programming
• IGA platform experience (SailPoint ISC preferred) and/or security-related (e.g., CISSP, CISM, CIAM) certifications are a plus
• In-depth knowledge of IAM concepts, technologies, and best practices (e.g., identity lifecycle management, access certifications, role-based access control, privileged access management)
• Proficiency in configuring, managing and troubleshooting IGA platforms (e.g., SailPoint ISC/IQ, Saviynt, One Identity Manager)
• Proficiency in integrating business applications with IGA platforms through pre-built connectors, REST, SOAP APIs, Web Services, SCIM, JDBC
• Experience with other IAM, security or IT Service Management (ITSM) platforms (e.g., ServiceNow) is a plus
• Proficiency in scripting and coding languages (e.g., PowerShell, JSON)
• Working knowledge of cloud security principles and IAM integration with cloud platforms (Azure, AWS)
• Strong understanding of security frameworks, compliance standards (e.g., SOX, NIST Cybersecurity Framework, GDPR, ISO 27001), and regulatory requirements impacting IAM
• Collaborate effectively with stakeholders outside the IAM team, either BT teams or business (HR, Audit)
• Strong analytical, critical thinking, problem-solving skills with the ability to assess complex IAM and compliance challenges and design scalable solutions.
• Excellent communication skills (written and verbal) with the ability to articulate technical concepts clearly and concisely
• Ability to work independently with limited supervision in a fast‑paced, dynamic environment