IAM Engineer

Refinitiv; Göteborgs kommun; Hybrid; SEK 900,000 - 1,200,000; Full time

Benefits offered by this job

Hybrid work model

Grow My Way program

Mental Health Days

Headspace access

Tuition reimbursement

Job summary

Thomson Reuters is seeking an IAM Security Engineer to design, implement, and operate enterprise IAM services across MEMORITY and related technologies. You will configure and maintain SSO, federation, and access governance for complex, global environments.

Hybrid work model is offered with 2–3 days in the office. You will collaborate with security and IT teams, drive automation, and contribute to blue‑chip identity solutions across on‑prem and cloud deployments.

Qualifications

• Experience designing and implementing IAM security technologies across large enterprises.
• Hands-on with SSO, federation, and authentication protocols such as SAML, OAuth, OIDC, Kerberos.
• Experience integrating MFA and secure API access in cloud and on‑prem environments.

Responsibilities

• Administer and implement security across IAM technologies including MEMORITY, Entra, AD, Access Governance, and LDAP directories
• Configure and troubleshoot SSO for enterprise apps using SAML, OAuth, Kerberos, and NTLM
• Manage MEMORITY Directory Server, including cluster management and replication across test/production
• Lead vulnerability mitigation and patch management for IAM platforms
• Prepare runbooks and documentation for Operations teams

Skills

MEMORITY

Entra ID

Active Directory

LDAP

SAML 2.0

OAuth 2.0

OIDC

Kerberos

NTLM

RADIUS

Tools

Memority Federate

Memority Directory

AWS

Job description

Pagero has recently joined Thomson Reuters. Together, we are building the world’s largest, open business network. With our cloud‑based network, customers can reach any business, anywhere in the world – no matter how many borders their operations may cross. We take care of the technical and regulatory requirements across the entire order‑to‑cash, purchase‑to‑pay and freight processes, to give customers data accuracy and security, transparency, and real‑time visibility. All this through a single connection.

About the Role

• Administer and implement security across IAM technologies including MEMORITY, Microsoft Entra, Active Directory, Access Governance, and LDAP directories
• Configure and troubleshoot Single Sign‑On (SSO) for enterprise applications using SAML, OAuth, Kerberos, and NTLM
• Implement OpenID Connect (OIDC) and OAuth 2.0 solutions using MEMORITY tools
• Manage and maintain MEMORITY Directory Server, including cluster management and timely replication of configuration changes across Test and Production environments
• Administer and performance‑tune MEMORITY/MSFT EntraID to support high‑traffic enterprise workloads
• Deploy and support highly available, scalable MEMORITY infrastructure on AWS and on‑premises, enabling SSO and federation for internal access
• Configure MEMORITY Access servers, Gateways, and Agents to protect enterprise resources
• Manage federation services between SiteMinder and MemorityFederate for SAML and WS‑FED based application migrations
• Work with multiple Memority Federate adapters including HTML Form, x509, Kerberos, OpenToken, Memority ID, and Composite adapters
• Coordinate with server hosting and MemorityFederate vendor teams to resolve hardware and software issues
• Lead vulnerability mitigation and patch management activities, including version upgrades
• Prepare comprehensive documentation and operational runbooks for the Operations team
• Act as first‑level escalation support for IAM operational teams and other IT security functions
• Drive development of automation and integration capabilities within IAM solutions

About You

• 3+ years of experience designing, developing and implementing IAM security technologies including MEMORITY, Entra, Active Directory, Access Governance, and LDAP
• Strong hands‑on experience with SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), Kerberos, NTLM, LDAP, and RADIUS
• Proven experience integrating, developing and automating MFA and authentication protocols
• Deep understanding of Identity domains: Authentication, Authorization, Access Management, and Attestation
• Experience with Memority Federate including adapter configuration, Service Provider/Identity Provider connections, metadata management, and SSL certificate handling
• Hands‑on experience with Memority Access integration with Memority Federate to protect applications using Memority Access Tokens
• Demonstrated experience with API security concepts, including integration with Open AM, SiteMinder, OAuth 2.0, JWT tokens, and certificate‑based authentication
• Familiarity with cloud platforms (AWS preferred) and an understanding of dynamic computing's impact on Identity
• Proven ability to deliver Proof of Concepts for identity and API security integrations
• Strong problem‑solving and troubleshooting skills in complex, large‑scale enterprise environments
• Experience designing and engineering identity solutions in a large global enterprise

What’s in it For You?

• Hybrid Work Model: flexible hybrid working environment (2‑3 days a week in the office for office‑based roles) and seamless experience that is digitally and physically connected
• Flex My Way: supportive workplace policies designed to help manage personal and professional responsibilities, including work from anywhere for up to 8 weeks per year
• Career Development and Growth: culture of continuous learning and skill development with Grow My Way programming and skills‑first approach
• Industry Competitive Benefits: comprehensive benefit plans to include flexible vacation, two company‑wide Mental Health Days off, access to Headspace app, retirement savings, tuition reimbursement, employee incentive programs, and resources for mental, physical and financial wellbeing
• Culture: globally recognized reputation for inclusion and belonging, flexibility, work‑life balance, and more
• Social Impact: paid volunteer days off annually and opportunities to get involved with pro‑bono consulting projects and ESG initiatives
• Making a Real‑World Impact: help customers pursue justice, truth and transparency, turning the wheels of commerce and reporting the facts

To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status or any other protected classification under applicable law. Thomson Reuters is proud to be an Equal Employment Opportunity Employer providing a drug‑free workplace. We also make reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs in accordance with applicable law. More information on requesting an accommodation here.