Lead Identity & Access Management Specialist

Wrike; Rennes; Híbrido; EUR 90.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health Insurance

Hybrid work model

Home office allowance

6 weeks vacation

RTT Recovery Days

Parental Leave: 16 weeks maternity / 4

Descripción de la vacante

Wrike, a distributed-first work management platform, seeks a Lead Identity & Access Management Specialist to architect and lead our cloud security posture. You will own IAM, deploy SSPM, and govern SaaS applications while mentoring a high-performing IT engineering team.

You will champion Zero Trust, automate identity pipelines, and collaborate across IT Ops, Security, HR, and Procurement to reduce risk and enable secure, scalable access across Wrike’s global SaaS ecosystem.

Formación

• 5+ years of dedicated experience in Cloud Security, IAM Administration, or IT Security Operations, including 1–2 years of leading/mentoring engineers.
• Deep expertise in identity protocols: SAML 2.0, OIDC, OAuth 2.0, and SCIM.
• Hands-on administration with IdPs (Okta or Microsoft Entra ID / Azure AD).
• Scripting in Python/PowerShell/Bash to automate security workflows and SaaS APIs.

Responsabilidades

• Design, deploy and manage IdP ecosystems with SAML/OIDC/OAuth provisioning and SCIM-based user lifecycles.
• Deploy SSPM/DSPM to enforce security baselines and prevent config drift.
• Audit and govern third-party integrations and OAuth permissions.
• Lead and mentor a security engineering team, promoting best practices and automation.

Conocimientos

SAML 2.0

OIDC

OAuth 2.0

SCIM

Cloud Security

IAM Administration

Leadership

Collaboration & Communication

Educación

CCSP Certification

CCSK Certification

Microsoft SC-300 Certification

Okta Certified Professional/Administrator

Herramientas

Okta

Microsoft Entra ID / Azure AD

Python

PowerShell

Bash

SSPM/DSPM tools

Descripción del empleo

Lead Identity & Access Management Specialist

Wrike is the most powerful work management platform. Built for teams and organizations looking to collaborate, create, and exceed every day, Wrike brings everyone and all work into a single place to remove complexity, increase productivity, and free people up to focus on their most purposeful work.

Wrike is our people, not a place. As a distributed team, we own our growth, stay globally connected, and rely on the product we build to deliver impactful work alongside brilliant minds. You'll have real ownership over meaningful work, a global team that has your back, and the flexibility to do your best work your way. If that sounds like you, we'd love to hear from you.

Our vision: A world where everyone is free to focus on their most purposeful work, together.

About the Role:

With flexible, distributed-first ways of working, you'll have the support to do your best work, wherever you are. As theLead Identity & Access Management Specialist you will be the primary architect and team leader driving our cloud application security posture. Your mission is to balance business agility with absolute data protection across our sprawling SaaS ecosystem (including M365, Slack, Salesforce, etc).

In this role, you will bridge the gap between user enablement and risk management by owning Identity and Access Management (IAM), deploying SaaS Security Posture Management (SSPM) tools to prevent configuration drift, and governing the entire lifecycle of our business applications. Crucially, you will lead, mentor, and scale a high-performing team of IT engineers with a strong security mindset, fostering a collaborative culture rooted in automation and proactive risk reduction.

Your Impact:

• By building and automating robust Identity pipelines: You will design, configure, and maintain our Identity Providers (IdP) using SAML 2.0, OIDC, and OAuth 2.0. You will leverage SCIM to automate provisioning and ensure immediate, airtight offboarding to prevent orphan accounts.
• By hardening our SaaS posture against configuration drift: You will deploy and manage SaaS Security Posture Management (SSPM) tools. You will establish and enforce security baselines (such as CIS benchmarks) across our key tools, catching unauthorized administrative changes in real time.
• By governing the security of third-party integrations: You will audit, restrict, and manage OAuth permissions granted to third-party add-ons and AI extensions, ensuring our enterprise data remains inside approved boundaries.
• By mitigating Shadow IT and assessing third-party risk (TPRM): You will analyze CASB, proxy, and endpoint logs to discover unauthorized SaaS usage. You will partner with Procurement to assess the security profiles of new software vendors by auditing SOC 2 reports, ISO certifications, and CAIQ sheets.
• By championing technical leadership and team growth: You will build, mentor, and guide a dedicated team of IT professionals. By establishing engineering best practices, leading agile workflows, and promoting continuous learning, you will multiply your impact across the entire organization and cultivate the next generation of cloud security talent.

Your Qualifications:

• Experience: 5+ years of dedicated experience in Cloud Security, IAM Administration, or IT Security Operations, including 1-2 years of experience leading, mentoring, or acting as a technical coordinator for other engineers.
• Technical Skills:
• Deep expertise in identity protocols: SAML 2.0, OIDC, OAuth 2.0, and SCIM.
• Hands‑on administration experience with modern IdPs (Okta or Microsoft Entra ID / Azure AD).
• Scripting capabilities in Python, PowerShell, or Bash to automate security workflows and interact with SaaS APIs.
• Soft Skills: Exceptional collaboration and communication skills to explain complex security practices to non‑technical stakeholders, combined with a pragmatic, problem‑solving mindset and proven leadership capabilities to unblock and motivate team members.

Standout Qualities:

• You hold an industry‑recognized Cloud Security certification like CCSP or CCSK (Cloud Security Alliance).
• You hold a specialized identity certification like Microsoft SC‑300 or an Okta Certified Professional/Administrator credential.
• You have direct experience deploying and running enterprise‑grade SSPM or DSPM solutions (e.g., Wiz, AppOmni, Reco, or Defender for Cloud Apps).
• Leadership Excellence: You have a proven track record of designing technical roadmaps, translating business objectives into actionable engineering sprints, and successfully leading a small‑to‑midsize IT or Security team through complex migrations or infrastructure overhauls.

Team Dynamics:

• Reporting: You will report directly to IT Ops Lead, joining a team that values proactive protection and automated operations.
• The Neighborhood: You will collaborate daily with IT Operations, HR Ops (for automated onboarding/offboarding workflows), Security, Procurement (for vendor assessments), and departmental leads across the company.
• Our Work Style: We operate in a highly flexible, remote‑friendly, and data‑driven environment. We live in Wrike for project management, utilize Okta / Entra ID, and scripting (Python, PowerShell) for API‑driven automation.
• Our Philosophy: We follow a Zero Trust security approach. We believe in securing through smart automation and user education rather than simply "block" productivity tools.
• 6 weeks of paid vacation + 5 RTT Recovery Days + Seniority Leave
• Parental Leave: 16 Weeks Maternity / 4 Weeks Paternity + Reserved Daycare Spot
• Health Insurance - Competitive Coverage - for employees + dependents
• Hybrid Work – Flexible hybrid working model with a monthly home office allowance of €20 (hybrid) or €50 (fully remote).
• Public transportation: Coverage of 75% of subscription fee / Sustainable mobility package 200€/year
• CSE Specific Benefits i.e. vacation vouchers, negotiated fees etc.

We’re a team of innovators and creators who solve the complex work problems of today and tomorrow.

Wrike is our people, not a place. With 1,000+ employees collaborating across nearly every time zone, we support talent through 10 global hubs — Australia, Costa Rica, Cyprus, Czechia, Estonia, France, India, Ireland, Japan, and the United States — offering flexible ways of working that include remote work, hybrid environments, and co‑working spaces across many locations.

While flexibility looks different across teams and regions, employees located near certain hubs — particularly in Prague (CZ), Nicosia (CY), Bangalore (IN), and Rennes (FR) — are generally expected to collaborate in person around 2–3 days per week, balancing the flexibility of distributed work with opportunities for in‑person collaboration and connection.

Our persona

Smart: We love what we do, and we’re great at it because this is our domain. Our combined knowledge in this space is unmatched.

Dedicated: We get up every day focused on helping our customers win. We’re committed to helping our teammates win, too!

Approachable: We're friendly, easy to get along with, considerate, and helpful.

Our culture and Values

We care about our customers. We understand the customer journey, experience, and value derived from Wrike. Decision‑making and action‑taking are done with the customer in mind.

We work as one and win together, each bringing unique strengths that contribute to diversity of thought for better outcomes. Leveraging our own work management platform, we foster an environment of creative collaboration and shared achievement.

We strive to succeed through continuous innovation. It’s our pursuit of novel concepts that helped us create a market category. We continue to cultivate a workplace that fosters creative thinking as a means of transcending conventional boundaries and empowers us to break new ground to deliver extraordinary work management solutions.

We believe in ownership at all levels of the organization, by owning workflows from start to finish. Each member of our team is an integral part of this commitment, establishing work as a platform for personal growth and transformation, as well as collective success and growth.