Senior Identity Security Engineer - AI-Driven, Remote

Scopely; Dublin; Remote; EUR 110,000 - 150,000; Full time

Job summary

Scopely is seeking a Senior Identity Security Engineer to join its Information Security team on a remote basis or hybrid basis if located in Barcelona. This is a hands-on role building identity controls that reduce privilege and protect critical operations across employee, player, business partner, and non-human identities.

You will work across AWS, GCP, Okta, AWS IAM Identity Center, and Zero Trust models, using Infrastructure as Code and automation-first security engineering.

Qualifications

• 5+ years of experience in IAM or identity-focused cloud/security engineering.
• Strong experience with Okta or a comparable workforce identity platform and AWS/GCP IAM, plus federation and provisioning protocols such as SAML, OIDC, OAuth, and SCIM.
• Production experience building, testing, and operating identity services or automation using Terraform or comparable infrastructure as code, Python, Go, or TypeScript.
• Strong knowledge of least privilege, just-in-time privileged access, identity lifecycle and governance, authentication controls, and non-human or workload identity risk.
• Experience threat-modeling identity architectures, integrations, and access paths, and driving remediation with service owners.
• Hands-on experience building AI-native workflows: multi-agent systems with human approvals.

Responsibilities

• Reduce standing and excessive access with least-privilege roles, just-in-time and time-bound elevation, and automated access reviews.
• Build repeatable identity and access workflows that make onboarding, approvals, role changes, reviews, and offboarding consistent, traceable, and timely.
• Govern non-human identities, including service accounts, workload identities, CI/CD identities, API credentials, and AI agents and their tool integrations.
• Protect access to critical business processes and systems with phishing-resistant authentication, device trust and posture signals, tightly controlled privileged access, and prompt revocation of suspicious sessions or credentials.
• Threat-model identity platforms, integrations, and access paths to identify exploitable trust relationships, privilege escalation, and credential misuse.
• Build identity telemetry and response workflows to detect risky sign-ins, privilege changes, credential misuse, and compromised integrations.
• Design and test break-glass and recovery procedures for identity services and cloud access so teams can regain secure access during an outage or compromise.
• Extend the same patterns to player and partner identities where security owns the controls, including federation and recovery patterns.

Skills

IAM

Okta

AWS/GCP IAM

Terraform

Python

TypeScript

SAML

OIDC

OAuth

SCIM

Automation

Just‑in‑time access

Least privilege

Identity governance

Tools

Okta

AWS

GCP

Terraform

Python

Go

TypeScript

CI/CD

Job description

Scopely is seeking a Senior Identity Security Engineer to join its Information Security team on a remote basis or hybrid basis if located in Barcelona. This is a hands-on role building identity controls that reduce privilege and protect critical operations across employee, player, business partner, and non-human identities.

You will work across AWS, GCP, Okta, AWS IAM Identity Center, and Zero Trust models, using Infrastructure as Code and automation-first security engineering.