Identity and Access Management (IAM) Security Governance Engineer
As an IAM Security Governance Engineer at MMS, you will own the governance, oversight, and continuous improvement of the IAM landscape across platforms, products, and countries. Your focus is on secure access governance, policy definition, implementation, and enabling teams to manage access securely and efficiently.
Responsibilities
- Own and maintain the Access Management Policy and related governance standards.
- Ensure consistent implementation and enforcement of the access management policy across all platforms, products, and environments.
- Act as the single point of contact for platforms and product teams for all access management process‑related topics.
- Coordinate closely with teams working on technical access management solutions (Cybersecurity, IAM, Cloud Governance, Infrastructure, etc.) to translate governance requirements into technical controls.
- Drive periodic user access reviews, entitlement recertifications, and access reporting across systems and applications.
- Partner with application and platform owners to define the scope, frequency and depth of access reviews.
- Identify applications, platforms and products that are non‑compliant with the Access Management Policy and other IAM‑related standards.
- Track, manage, and report access‑related risks, violations, and control gaps.
- Support IAM tool projects (implementation, enhancement or migration) from a governance and requirements perspective.
- Provide guidance, enablement and training to application owners, platform teams and business stakeholders on implementing secure access practices and meeting governance requirements.
- Support the definition and governance of sign‑on solutions utilizing SAML2, OAuth2, LDAP and Active Directory in alignment with MMS security standards.
- Collaborate with the technical IAM team on the secure design and hardening of IAM software and systems, ensuring that governance policies are technically enforceable.
Profile & Qualifications
- Demonstrable experience within a comparable role in IAM, security governance, or access management.
- Strong knowledge of IAM software, systems and concepts, including role‑based security and access governance.
- Experience with hardening IAM software and systems and understanding of identity and access risks and controls.
- Experience with SSO implementation, IAM setup and OAuth configuration, and familiarity standards such as SAML, OAuth, SSO and LDAP.
- Experience with cloud‑based identity models and integrating cloud services into an enterprise IAM framework.
- Client and stakeholder relationship management, ensuring delivery quality and expert advice in Cyber Security, IAM, and access governance.
- Proven ability to produce clear documentation, process flows, policies and standards around IAM and access management.
- Experience working with enterprise platform teams that support multiple software development product teams.
- 5+ years’ experience in IAM Security and/or Access Governance, including security principles, role‑based security and least‑privilege concepts.
- Bachelor’s degree in a relevant field (e.g., Computer Science, Information Security) or equivalent work experience.
- Hands‑on experience designing, building, deploying, and administering IAM software and hardware, and/or access governance solutions.
- Strong understanding of least privilege, access management, roles and privileges, and segregation of duties.
- Excellent communication and collaboration skills in a geographically and culturally diverse workforce.
- Strong sense of professionalism, integrity and ethics with a risk‑ and control‑oriented mindset.
Company
MediaMarktSaturn Technology is working to make Europe’s number‑one consumer electronics retailer the technology leader in its industry. Our teams use state‑of‑the‑art technology to develop customer‑focused solutions for more than 6 million customers across 13 countries.
Benefits
- Young environment encouraging contribution and collaboration.
- 10 % discount on the MediaMarkt website.
- Flexible pay options and a comprehensive compensation package.
- Flexible working hours and the possibility to combine home office with office presence.
- Access to training budget for continuous skill development.
- Language classes in English, Spanish, and German.
- Remote‑friendly policies and wellness programs.
Job Information
Location: Barcelona, El Prat De Llobregat
Type of Employment: Full Time
Working Hours: 40
Department: HQ – IT