Identity and Access Management Engineer

Bunge; España; On-site; PHP 4,888,268 - 6,284,916; Full time

Job summary

Bunge is seeking an Identity and Access Management Engineer to enhance and administer their IGA platform. This role involves managing identity life cycles, ensuring security compliance, and providing technical leadership.

The ideal candidate will have over 10 years of IT experience, with a strong focus on IAM practices and technologies. This position offers opportunities for collaboration across teams and innovation in IAM processes.

Qualifications

• 10+ years in IT with at least 6 years in IAM or cybersecurity.
• Experience with IGA platforms such as SailPoint, Saviynt, or One Identity Manager.
• Security-related certifications (CISSP, CISM) are a plus.

Responsibilities

• Administer and enhance Bunge's IGA platform.
• Develop reports and dashboards to track KPIs and exceptions.
• Collaborate with Business Technology and HR to facilitate IAM governance.

Skills

Identity Governance & Administration

Role-Based Access Control (RBAC)

Privileged Access Management

Security Audits

Automation

Scripting (PowerShell, JSON)

Cloud Security

Education

Bachelor of Science in Computer Science or related field

Tools

SailPoint ISC

ServiceNow

Job description

City: Sant Just Desvern
State: Barcelona (ES-B)
Country: Spain (ES)
Requisition Number: 46142

Overview

The Identity and Access Management Engineer is part of the broader Bunge Global Identity and Access Management (IAM) team. You will be responsible for configuring, operating, and troubleshooting Bunge's Identity Governance & Administration (IGA) solution to ensure secure, compliant, and efficient user access management across the enterprise. As a Subject Matter Expert (SME) in IGA, you will influence IAM design decisions and governance models. This position offers technical challenges, a dynamic environment for collaboration with diverse stakeholders across cybersecurity functions as well as with other business units, and continuous learning within a leading global organization.

Key Responsibilities

• Administer and enhance Bunge's IGA platform
• Configure and maintain joiner‑mover‑leaver (JML) lifecycle processes, access request workflows, approval processes, access certification campaigns, role models (RBAC/ABAC) and Segregation of Duties (SoD) policies
• Analyze and optimize role mining activities
• Develop reports and dashboards to identify and track exceptions and KPIs
• Work with application owners to onboard applications into the IGA platform via APIs, connectors, and custom scripts
• Automate provisioning, deprovisioning, and review processes using IGA workflows
• Provide L2/L3 support for IGA platform‑related issues
• Troubleshoot IGA platform issues (e.g., provisioning, certification, integration)
• Perform system configuration changes
• Collaborate with Business Technology, IT Operations, Application Development, and HR to facilitate seamless IAM governance
• Drive continuous improvement of Bunge's IAM program, processes, tools, and policies
• Identify and pilot opportunities for leveraging Artificial Intelligence within the scope of IAM
• Provide technical leadership and mentorship to other IAM colleagues
• Support audit and compliance efforts by collaborating with internal and external auditors

Education, Experience and Certifications

• 10+ years in the IT field, with a minimum of 6 years in Identity and Access Management or cybersecurity‑related functions
• Bachelor of Science degree in Computer Science, Information Systems, Engineering, or Programming
• Experience with SailPoint ISC (preferred) or other IGA platforms such as Saviynt, One Identity Manager
• Security‑related certifications (e.g., CISSP, CISM, CIAM) are a plus
• In‑depth knowledge of IAM concepts, technologies, and best practices (identity lifecycle management, access certifications, role‑based access control, privileged access management)
• Proficiency in configuring, managing, and troubleshooting IGA platforms
• Proficiency in integrating business applications through connectors, REST/SOAP APIs, SCIM, JDBC
• Experience with IAM, security, or IT Service Management platforms (e.g., ServiceNow) is a plus
• Proficiency in scripting and coding languages (PowerShell, JSON)
• Working knowledge of cloud security principles and IAM integration with Azure, AWS
• Strong understanding of security frameworks and compliance standards (SOX, NIST, GDPR, ISO 27001)
• Strong analytical, critical thinking, and problem‑solving skills
• Excellent written and verbal communication skills
• Ability to work independently with limited supervision in a fast‑paced, dynamic environment