> Markdown version of [/jobs/ext/1692735-lead-iam-engineer](https://www.wearedevelopers.com/jobs/ext/1692735-lead-iam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead IAM Engineer - **Company:** Morningstar - **Location:** Madrid, Spain - **Contract:** Permanent contract - **Skills:** Active Directory, Microsoft Azure, Cloud Computing, Multi-Factor Authentication, Identity and Access Management, OAuth, OpenID, Windows PowerShell, Openid Connect, Azure Active Directory, Runbook, Security Assertion Markup Language (SAML), Single Sign-On, Enterprise Software Applications, Okta, Information Technology, Splunk, Servicenow - **Published:** July 13, 2026 - **Apply:** https://www.jobleads.com/es/job/e1f623d6fc0ab8c298c9dac2d4e8df9be ## About the Role * Bachelor's degree in Computer Science, Information Technology, or a related discipline (or equivalent practical experience). * Experience leading or mentoring engineering teams in an enterprise technology environment. * Strong hands-on experience engineering enterprise Identity and Access Management solutions. * 3+ years' experience with Okta Single Sign-On (SSO) and Lifecycle Management. * 3+ years' experience with Okta Identity Governance (OIG). * 3+ years' experience designing and building solutions using Okta Workflows. * 5+ years' experience working with Active Directory in complex enterprise environments. * Strong knowledge of Active Directory Group Policy and hybrid identity architectures. * Experience with Microsoft Entra ID (Azure Active Directory). * Experience with Azure Application Proxy or similar application proxy technologies. * Strong PowerShell scripting skills with a focus on automation. * Experience with Microsoft Certificate Services. * Excellent troubleshooting, analytical, and problem-solving skills. * Ability to lead technical initiatives while remaining hands-on with engineering work. * Excellent communication and stakeholder management skills. Self-motivated with the ability to work autonomously in a fast-moving environment. * ServiceNow * Splunk * Basic knowledge of System for Cross-domain Identity Management ## Description The Lead IAM Engineer working in the IAM team is responsible for enterprise-wide identity and access management across both Microsoft and Okta platforms. This highly visible role partners closely with teams across the organization, requiring a proactive, innovative mindset and a willingness to think beyond conventional approaches. Operating within an Agile environment, the team moves at pace to adapt to evolving business needs. Our technologists bring a diverse range of expertise and share a commitment to treating technology as a craft, with a strong focus on delivering high-quality, customer-centric outcomes. The team underpins critical business services, enabling key functions across the organization to deliver seamless and exceptional user experiences., * Lead, mentor, and develop a team of IAM Engineers, fostering a culture of technical excellence, collaboration, and continuous improvement. * Define engineering standards, best practices, and technical direction across the IAM platform. * Provide technical leadership through architecture reviews, design discussions, and coaching. * Drive project planning, prioritisation, and team capacity planning to ensure successful delivery. * Contribute to the long-term IAM strategy and technology roadmap. * Design, build, and evolve enterprise Identity and Access Management solutions using Okta and Microsoft Entra ID. * Engineer and automate Joiner, Mover, Leaver (JML) lifecycle processes using Okta Workflows. * Design and implement secure Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity governance solutions. * Integrate enterprise applications using SAML, OAuth, OpenID Connect (OIDC), SCIM, and other modern authentication standards. * Engineer and maintain hybrid identity services across Active Directory and Microsoft Entra ID. * Develop PowerShell automation to improve provisioning, administration, and operational efficiency. * Own the health, scalability, resilience, and security of the enterprise identity platform. * Lead the planning, design, and implementation of IAM projects and platform enhancements. * Produce and maintain technical documentation, architecture diagrams, runbooks, and engineering standards. * Provide technical guidance during major incidents and act as the escalation point for complex identity-related issues. * Collaborate with Security, Infrastructure, Cloud, and Application teams to deliver secure identity solutions. * Evaluate emerging identity technologies and recommend improvements that enhance security, automation, and user experience. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Backstage in Practice: Offloading Developer Operational Work Through Platform Self-Service](https://www.wearedevelopers.com/videos/1922-backstage-in-practice-offloading-developer-operational-work-through-platform-self-service) - [Advanced Cypress: custom assertions and tasks](https://www.wearedevelopers.com/videos/790-advanced-cypress-custom-assertions-and-tasks) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)