Senior Identity Management Engineer

CloudPay; España; On-site; EUR 70,000 - 110,000; Full time

Job summary

CloudPay seeks Senior Identity & Access Management Engineers to lead our identity modernisation journey and transition to a Zero Trust security model. You will own the design, implementation, and evolution of our IAM platform across a global environment.

You’ll work hands-on with ForgeRock and PingOne Advanced Identity Cloud, automate lifecycles, and drive secure, scalable identity services with strong collaboration across Security, Platform Engineering, Product, and IT teams.

Qualifications

• Strong hands-on experience delivering enterprise IAM solutions.
• Expertise in identity protocols including SAML, OAuth2, OIDC, and SCIM.
• Experience with ForgeRock, Ping Identity technologies, or similar IAM platforms.
• Knowledge of RBAC, identity governance, lifecycle management, and Zero Trust.

Responsibilities

• Design, build, and optimise identity services using ForgeRock/PingOne Advanced Identity Cloud.
• Create seamless authentication, registration, federation, and self-service user experiences.
• Develop secure integrations using SAML, OAuth2, OIDC, and SCIM.
• Build automation and CI/CD pipelines to accelerate IAM deployments.
• Implement identity governance, provisioning, and RBAC for Zero Trust architecture.
• Improve platform observability, resilience, and security monitoring.
• Troubleshoot complex authentication and access management challenges.
• Collaborate with Security, Platform Engineering, Product, and Corporate IT teams.
• Mentor engineers and champion best practices.

Skills

IAM

ForgeRock

PingOne

OAuth2

SAML

OIDC

SCIM

RBAC

Zero Trust

IaC

Tools

ForgeRock

Ping Identity

Job description

Our Vision

To be the world's most trusted global payroll partner, simplifying pay for all employees.

About This Job Opportunity

Our Vision

To be the world's most trusted global payroll partner, simplifying pay for all employees.

Our Mission

Empowering global workforces with seamless, compliant, and innovative payroll and payment solutions, enabling businesses to thrive in a connected world.

Our People

Our fundamental beliefs at CloudPay are built on core values of professionalism, passion, empowerment, innovation, and teamwork. We value our employees and strive to create a great workplace where everyone is valued, heard, inspired, and encouraged to bring their authentic selves to work. We're committed to providing an excellent employee experience through fulfilling projects, empowerment to make a difference, and an environment that inspires innovation.

What makes this role exciting - Shape the Future of Identity

We're looking for Senior Identity & Access Management Engineers to help lead our identity modernisation journey and accelerate our transition to a Zero Trust security model.

This is a highly hands-on role where you'll own the design, implementation, and evolution of our identity platform, built on ForgeRock Identity and Access Management (PingOne Advanced Identity Cloud). You'll work at the heart of a strategic transformation, automating identity lifecycle management, modernising access controls, and delivering secure, scalable identity services across our global platform.

If you enjoy solving complex security challenges, building enterprise-scale IAM solutions, and making a visible impact on business outcomes, we'd love to hear from you.

Main responsibilities:

• Design, build, and optimise identity services using ForgeRock/PingOne Advanced Identity Cloud.
• Create seamless authentication, registration, federation, and self-service user experiences.
• Develop secure integrations using SAML, OAuth2, OIDC, and SCIM.
• Build automation and CI/CD pipelines to accelerate and standardise IAM deployments.
• Implement identity governance, provisioning, and role-based access controls to support a Zero Trust architecture.
• Improve platform observability, operational resilience, and security monitoring.
• Troubleshoot complex authentication and access management challenges.
• Collaborate closely with Security, Platform Engineering, Product, and Corporate IT teams.
• Mentor engineers and champion engineering best practices across the team.

Experience needed for this role:

• Strong hands-on experience delivering enterprise IAM solutions.
• Expertise in identity protocols including SAML, OAuth2, OIDC, and SCIM.
• Experience with ForgeRock, Ping Identity technologies, or similar enterprise IAM platforms.
• Knowledge of RBAC, identity governance, lifecycle management, and Zero Trust principles.
• Experience automating infrastructure and deployments using scripting and Infrastructure as Code tools such as Terraform, Python, PowerShell, or Ansible.
• Strong troubleshooting and problem-solving skills with the ability to diagnose complex authentication and integration issues.
• A collaborative mindset and passion for building secure, scalable solutions.

Nice to Have

• Experience with IGA platforms such as SailPoint or Saviynt.
• Exposure to PAM/PIM solutions such as CyberArk.
• Cloud identity experience with Microsoft Entra ID, AWS, Azure, or GCP.
• Docker and Kubernetes experience.
• Relevant certifications (Ping Identity, CISSP, CISM, CyberArk, Microsoft).

About You And Our Core Values

• Taking ownership, working with integrity and respect
• Being a team player is key to our culture
• Solution and customer focused
• Great initiative with the goal for excellence in achieving results
• Dedicated to developing and always looking for continuous improvements
• Be creative, be committed, be engaged and enjoy what you do

CloudPay is committed to being an equal opportunities employer.

The CloudPay culture is built upon on five core values, from which we develop our service, our technology and our business strategies. Our fundamental beliefs are a promise to our employees, customers and partners, built on the core values of professionalism, passion, empowerment, innovation, and teamwork.

Glassdoor