Senior Agentic IAM Security Engineer — Remote Spain

Intellias; Asturias; Presencial; EUR 90.000 - 140.000; Jornada completa

Descripción de la vacante

Intellias seeks a Senior Agentic Identity & Access Security Engineer to work remotely from Spain, focusing on secure agentic AI access within a regulated financial estate. You will design IaC-driven identity patterns, credential flows, and onboarding standards to enable self-service, secure access across high-velocity teams.

This senior role blends enterprise IAM, platform engineering, and AI security, with opportunities to ship production code using Vault, Keycloak, and Terraform-based

Formación

• 6+ years in security architecture or platform engineering with production code experience
• Deep knowledge of identity and authorization: OIDC, OAuth2, JWT
• Hands-on Vault experience with dynamic/short-lived secrets and token migration
• Keycloak policy modelling with Terraform-driven configuration
• Fluency in Terraform IaC to design self-service patterns
• Experience with Active Directory and Entra integration and LDAP mapping

Responsabilidades

• Design and ship IaC-driven, self-service identity patterns across the firm
• Define the currently undefined agentic runtime security model and MCP tool access
• Lead transition from long-lived secrets toward ephemeral credentials
• Layer LLM guardrails and policy-as-text with human review
• Establish onboarding standards and drive adoption for better developer experience
• Design SIEM integration and anomaly detection for agentic workflows
• Deliver authenticated user journeys with scoped access to internal systems

Conocimientos

Security architecture

OIDC/OAuth2/JWT

HashiCorp Vault

Keycloak policy

Terraform IaC

AD Entra LDAP

Herramientas

Keycloak

HashiCorp Vault

Terraform

Descripción del empleo

Intellias seeks a Senior Agentic Identity & Access Security Engineer to work remotely from Spain, focusing on secure agentic AI access within a regulated financial estate. You will design IaC-driven identity patterns, credential flows, and onboarding standards to enable self-service, secure access across high-velocity teams.

This senior role blends enterprise IAM, platform engineering, and AI security, with opportunities to ship production code using Vault, Keycloak, and Terraform-based