Position: IAM Architect/Engineer
Location: Remote Spain
At Strada, possibility isn't just a promise – it's the foundation of everything we do. We believe in unlocking potential for every colleague, creating a journey of growth, discovery, and impact.
With the support, resources, and opportunities we provide, you'll build a fulfilling future – working on meaningful projects that span industries and regions, contributing to outcomes that matter.
Strada is a people, payroll, and technology leader simplifying international workforce management. Operating in 180+ countries, we design and deliver people-first solutions powered by cloud-based technology – helping organizations grow and enabling workforces to perform at their best.
Learn more at www.stradaglobal.com
Role
IAM Strada Global is a leading provider of HR and payroll services, delivering secure and innovative workforce solutions worldwide. As we continue to scale, Identity & Access Management (IAM) is at the heart of our cybersecurity and business enablement strategy, ensuring seamless and secure access for employees, customers, and partners.
We are building a modern IAM framework that integrates across Entra ID, Entra B2C, SAP, and Workday, aligning with zero-trust principles, automation, and regulatory compliance.
Role Overview
•The IAM Architect will lead the design, implementation, and optimization of enterprise identity and access solutions, ensuring seamless integration across cloud, SaaS, and on-prem systems.
•This role will focus on Entra ID (Azure AD), Entra B2C, SAP, and Workday integrations, balancing security, user experience, and operational efficiency.
•This is a hands-on technical leadership role, working closely with security engineers, infrastructure teams, and business application owners to drive a modern IAM strategy at Strada.
Key Responsibilities
Identity & Access Architecture
•Design and implement a scalable IAM architecture utilizing Microsoft Entra ID, Entra B2C, and other identity platforms.
•Lead integration efforts across SAP, Workday, SaaS applications, and custom-built platforms.
•Define IAM governance models, including role-based access control (RBAC), attribute-based access control (ABAC), and just-in-time (JIT) access.
•Support the adoption of zero-trust identity principles, including MFA, conditional access, and passwordless authentication.
Identity Lifecycle & Automation
•Architect identity lifecycle management solutions, automating provisioning/deprovisioning across HR, IT, and security systems.
•Implement Identity Governance & Administration (IGA) best practices, ensuring least privilege access and role alignment.
•Develop custom integrations and automation scripts (PowerShell, Python, API-based solutions) to enhance IAM workflows.
•Collaborate with HR (Workday) and ERP (SAP) teams to synchronize identity management with workforce operations.
Security & Compliance
•Ensure regulatory compliance (GDPR, SOC 2, ISO 27001) by aligning IAM controls with security frameworks.
•Design and enforce privileged access management (PAM) solutions, securing admin accounts and critical systems.
•Support security audits and identity risk assessments, addressing access anomalies and reducing attack surfaces.
•Enhance identity threat detection and response capabilities in collaboration with SOC and SIEM teams.
Required Qualifications
•6+ years of hands-on IAM experience, with at least 2 years in an architect or senior engineering role.
•Expertise in Entra ID (Azure AD), Entra B2C, and IAM-related Microsoft security tools.
•Experience integrating IAM with SAP, Workday, and other enterprise applications.
•Deep knowledge of SAML, OAuth, OpenID Connect, SCIM, and federation protocols.
•Hands-on experience with identity automation, PowerShell scripting, and API-based integrations.
•Strong understanding of zero-trust architecture, privileged access management (PAM), and adaptive authentication.
•Ability to collaborate with IT, HR, DevOps, and security teams to align identity solutions with business needs.
Preferred Qualifications
•Certifications such as Microsoft Certified: Identity and Access Administrator, CISSP, GIAC-GIAM, or Okta Certified Architect.
•Experience with Azure AD Conditional Access, Defender for Identity, and Entra Permissions Management.
•Knowledge of Identity Governance and Administration (IGA) platforms like SailPoint or Saviynt.
•Familiarity with DevOps and cloud security best practices in AWS/Azure environments.
What We Offer
•Opportunity to shape the architecture of mission-critical cloud applications.
•Collaborative and innovative work environment.
Benefits
Strada offers a range of benefits for health, wellbeing, finances, and future, including health coverage, wellbeing programs, paid leave (vacation, sick, parental), retirement plans, and learning opportunities.
Authorization to work in the Employing Country
To be considered, you must have current and future work authorization in the country where you're applying, without the need for visa sponsorship by Strada.
